(b) (6) 



From: 
Sent: 
To: 
Subject: 



(b) (6) 



l uesday, October 1 1 , 201 1 3:34 PM 



(b) (6) 



Kb: u/huuu) Occupy Pittsburgh Threat Assessment 



That sounds great. Thank you. 



(b) (6) 



From: 

Se nt: Tuesday, Octo ber 11, 2011 3:31 PM 

To:[gagjjj^H 

Subject: RE: U/FOUO) Occupy Pittsburgh Threat Assessment 



(b) (6) 



I believe ffi^KH is covering this — My understanding is thatjUM asked her to check with us on any work we had done on 
t his issue and t hen follo w -up on the matter. When it came in, I was on SL at an medical appo intment, and you were on 
AL —so 1 think [0IG)l was dratted. 1 had not ha d any fu rther contact then the voicemail left by^^^^^H and 1 told 
[0K9 that I thought the same for you as I think [0I©1 simply called us because he has worked with each of us in the 
past. I am not sure if she needs our assistance. I know she leaves for vacation on Thursday — let's touch base with her 
together tomorrow and then we can figure out any next steps. Sound like a plan? 



(b) (6) 



Senior Pol icy Advisor 

Intelligence, Security, and Information Sharing (ISIS) Section 

Office for Civil Rights & Civil Liberties 

Department of Homeland Security 

Office: 

Blackberry: 

Fax: (202) 357-8341 

emai I : 

J Wl CST 




(b) (6) 
"(b) (6) 



(b) (6) 



From: 

Se nt: Tuesday, Oct ober 11, 2011 3:23 PM 

Subject: FW: U/FOUO) Occupy Pittsburgh Threat Assessment 



Hi 



(b) (6) 



Sorry if I'm behind the curve on this, but I wanted to see if we needed to take any action on this Threat Assessment. It 
appears that it was assigned to [01(91 I but I wanted to check with you to see if I should follow-up on this. 



Also, I'm out of my meetings so let me know if I can help with any taskers! 



(b) (6) 



(b) (6) 



From: 

Se nt: Friday, Octo ber 07, 2011 10:14 AM 

To: 

Cc: 

Subject: FW: U/FOUO) Occupy Pittsburgh Threat Assessment 




(b) (6) 



As we discussed. 



(b) (6) 



From: 

Se nt: Friday, Octob er 07, 2011 10:07 AM 

To:Qs^|^H 

Subject: U/FOUO) Occupy Pittsburgh Threat Assessment 



(b) (6) 



From: 

Se nt: Friday, October 07, 2011 10:04 AM 

To: 

Cc: 

Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 



(b) (6) 



(b) (6) 



(b) (6) 



I left both of you voice mail messages in which I described this issue in greater detail. 
There is attached to this email a threat bulletin being disseminated by the Office of Emergency Management in Pittsburgh 
in which it discusses the th reat posed by the Occupy Pittsburgh campaign and the hackers' group: Anonymous. Both 
myself aniuQWg^^^^H (IO deployed to the PACIC Center in Harrisburg) are somewhat concerned that several items 
contained in this Intel Bulletin might be advocating surveillance and other countermeasures to be employed against 
activities protected und er the 1 st Amend ment. Would either one or both of you be able to see what could be developed 
from this document that[0K^^^^H could take back to the Intel staff that produced this so that in the future they have a 
greater awareness of how to develop intelligence assessments that don't undermine Constitutionally protected speech and 
assembly rights? 
Thanks in advanced, really appreciate all your help. 



(b) (6) 



From: 

Se nt: Friday, O ctober 07, 2011 9:52 AM 

To:Q2^B 

Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 



(b) (6) 



|As discussed. Pittsburgh published and distributed this assessment yesterday. I'm just looking for some help in 
guiding their personnel on what should and shouldn't be said concerning planned, legal demonstrations. Thanks for 
your help. ' 




(b) (6) 



From: 

Se nt: Thursday, October 06, 2011 3:06 PM 

To 




Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 



FYI, 
IS! 




(b) (6) 



Field Intelligence Officer 
Transportation Security Administration 
Western Pennsylvania and West Virginia 



(b) (6) 



b (6) 



(b) (6) 



From: 

Se nt: Thursday, Oct ober 06, 2011 2:51 PM 

Subject: (U/FOUO) Occupy Pittsburgh Threat Assessment 



Attached is a product concerning the Occupy Pittsburgh event planned for October 15, 2011 and Feedback Form. As 
always, your feedback is appreciated. 

Please disseminate as appropriate. 



(b) (6) 



PCP 



Emergency Management Specialist/ Planner 
City of Pittsburgh 

Office of Emergency Management and Homeland Security 

200 Ross Street, Fifth Floor 

Pittsb urgh PA 15219 

Main:[0l@^^^H 

Fax: ArTFzbttttZ 

Cell: 



(b) (6) 



http://www.facebook.com/pqh.ema 
http://twitter.com/PittsburqhOEMHS 



http://www.pittsburqhpa.gov/ema/ 



b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 

Categories: 



(b) (6) 



Monday, October 1 7, 201 1 11 :50 AM 
CRCL Product Review 



(b) (6) 



Kb: uuidance Requested: Occupy Wall Street 
Red Category 



(b) (6) 



Yes, I think general guidance rather than responding to every inquiry from the DHS l&A field reps at fusion centers would 
be the best course of action. I do think it would be helpful to get a better idea of what types of requests they are 
encountering— but regardless, general INFORMAL guidance would be best. I say informal guidance, because in my 
view, formal guidance would be specific policy advice on each individual inquiry . Let me know if you have any more 
questions on this. Also, do you think it makes sense to work with Priv to get on the same page? 



From: [g|g| | On Behalf Of CRCL Product Review 

Se nt: Monday, Oct ober 17, 2011 11:41 AM 
To:Qs^lJ^| 

Cc: CRCL Product Review 

Subject: FW: Guidance Requested: Occupy Wall Street 



Hi 



(b) (6) 



We received a request from SLPO for formal CRCL guidance related to the Occupy Wall Street protest. Since this is the 
first request of this kind that I've seen, I wanted to double check with you before moving forward. 

My initial recommendation is to request that Shala Byers provide us with a specific question. Based on her email below 
SLPO has received numerous requests, and I believe that understanding the question would assist us in framing a 
response. 

As a secondary matter, I wanted to see whether you would like us to develop policy guidance on this topic? Or, 
alternatively we can make ourselves available to component partners or intelligence officers who request information 
on First-Amendment protected activities. My recommendation is for CRCL to draft general guidance, rather than taking 
on ad hoc questions about Occupy Wall Street. 

Please let me know if you agree with the approach to (1) request additional information on the types of requests SLPO is 
receiving; (2) draft initial guidance for your review. 

Thanks, 



(b) (6) 




From: Byers, Shala 

Sent: Monday, October 17, 2011 11:30 AM 

To: CRCL Product Review; Privreview 



(b) (6) 



(b) (6) 



Cc: SL_Support; 

Subject: Guidance Requested: Occupy Wall Street 



All, 

We have received a number of questions and requests for information regarding Occupy Wall Street from a number of 
component partners and intelligence officers. Recognizing that this is a first amendment-protected activity, we have 
recommended (on an ad hoc basis when we received requests) that our Intelligence Officers refer inquiries to Fusion 
Centers and avoid the topic altogether. That being said, given the number of requests that have appeared, we would 
like to equip the field with formal guidance as they will likely continue to receive requests like this from Fusion Center 
partners. We would greatly appreciate formal guidance from CRCL and/or Privacy (whatever you all would prefer to do) 
sooner rather than later to make sure the all in the field are acting in accordance with CRCL and Privacy policies. Thank 
you for your help! 

Also, if you could, please cc SL Support on the response as they are the intake point for requests and it would be helpful 
for them to have this on hand to provide in case someone misses our e-mail. 

Best, 



Shala Byers 

Intelligence Coordination Branch 

State and Local Program Office 

Intelligence and Analysis Directorate 

Depart ment of Homeland Security 

Office: 

E-mail:! 




b (6) 



From: 
Sent: 
To: 
Subject: 



(b) (6) 



Monday, October 1 7, 201 1 2:03 PM 



(b) (6) 



hvv: uuiaance Requested: Occupy Wall Street 



DELIBERATIVE 



(b) (6) 



Below is my tweaks to the email that Scott Matthews drafted. I've used bold and underline to note the language I've 
added. Please advise. 



(b) (6) 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged constitutionally 
protected activity. We maintain our longstanding position that DHS should not report on activities when the basis 
for reporting is political speech. We would also be loath to pass requests for more information on the protests along to 
the appropriate fusion centers without strong guidance that the vast majority of activities occurring as part of these 
protests is protected. To do otherwise might give the appearance that DHS is attempting to circumvent existing 
restrictions, policies, and laws. 

To a large degree, these protests are no different from any other protests/events from civil liberties, civil rights and 
privacy perspectives. The issue is not the assembly of the groups nor the message of the participants, it is only (as far as 
DHS is concerned) illegal or suspicious behavior related to a DHS mission that occurs during the protests. A possible 
exception would be reports on the environment created at the protests sites that would endanger public health and safety. 

So there are certainly some circumstances that may allow limited reporting on behavior that is coincident and collocated 
with "Occupy Wall Street" like protests. Persons demonstrating illegal or suspicious behavior and attempting to use the 
protests to obscure their activity could be reported, as long as there is no attempt to link the suspicious/illegal behavior to 
first amendment protected activity. Indeed, the normal CRCL and PRIV guidance used for HIRs and intelligence products 
would apply, as it is only the behavior which is being addressed. 

It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what type of information 
is being requested, if we were to reconsider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we would be happy 
to start the drafting process. Inevitably, drafting formal guidance would require a bit more time to gain the necessary 
clearances. 




J. Scott Mathews, CIPP, Senior Privacy Analyst for Intelligence 
Privaof£ffi£^togjlment of Homeland Security 

TeTi 51WfSi] H E s m D ail 

HTSN 





From: Byers, Shala 

Sent: Monday, October 17, 2011 11:30 AM 

To: CRCL Produ ct Review; Pr i yr^iew 

Cc: SL_Support; [QJS^^HHSES^^^^M' 
Subject: Guidance Requested: Occupy Wall Street 



All, 



We have received a number of questions and requests for information regarding Occupy Wall Street from a number of 
component partners and intelligence officers. Recognizing that this is a first amendment-protected activity, we have 
recommended (on an ad hoc basis when we received requests) that our Intelligence Officers refer inquiries to Fusion 
Centers and avoid the topic altogether. That being said, given the number of requests that have appeared, we would 
like to equip the field with formal guidance as they will likely continue to receive requests like this from Fusion Center 
partners. We would greatly appreciate formal guidance from CRCL and/or Privacy (whatever you all would prefer to do) 
sooner rather than later to make sure the all in the field are acting in accordance with CRCL and Privacy policies. Thank 
you for your help! 

Also, if you could, please cc SL Support on the response as they are the intake point for requests and it would be helpful 
for them to have this on hand to provide in case someone misses our e-mail. 

Best, 

Shala Byers 

Intelligence Coordination Branch 

State and Local Program Office 

Intelligence and Analysis Directorate 

Department of Homeland Secure 

Office:! 

E-mail 




b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 



(b) (6) 



Monday, October 1 7, 201 1 2:51 PM 
Privreview 



(b) (6) 



Kb: uuidance Requested: Occupy Wall Street 



Scott, this looks great. Thank you for putting this well-written response together. We fully support this position. I've 
added a few extra nuggets for your consideration. I've used bold and underline to annotate the proposed changes. If 
you agree with this, please feel free to send forward. I've added my signature block to show my agreement. 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged constitutionally 
protected activity. We maintain our longstanding position that DHS should not report on activities when the basis 
for reporting is political speech. We would also be loath to pass DHS requests for more information on the protests 
along to the appropriate fusion centers without strong guidance that the vast majority of activities occurring as part of 
these protests is protected. To do otherwise might give the appearance that DHS is attempting to circumvent existing 
restrictions, policies, and laws. 

To a large degree, these protests are no different from any other protests/events from civil liberties, civil rights and 
privacy perspectives. The issue is not the assembly of the groups nor the message of the participants, it is only (as far as 
DHS is concerned) illegal or suspicious behavior related to a DHS mission that occurs during the protests. A possible 
exception would be reports on the environment created at the protests sites that would endanger public health and safety a 
where the health and safety concern relates to the DHS mission . 

So there are certainly some circumstances that may allow limited reporting on behavior that is coincident and collocated 
with "Occupy Wall Street" like protests. Persons demonstrating illegal or suspicious behavior and attempting to use the 
protests to obscure their activity could be reported, as long as there is no attempt to link the suspicious/illegal behavior to 
first amendment protected activity. Indeed, the normal CRCL and PRIV guidance used for HIRs and intelligence products 
would apply, as it is only the behavior which is being addressed. 

It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what type of information 
is being requested, if we were to reconsider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we would be happy 
to start the drafting process. Inevitably, drafting formal guidance would require a bit more time to gain the necessary 
clearances. 





J. Scott Mathews, CIPP, Senior Privacy Analyst for Intelligence 
Privacy Offcejep art ment of Homeland Security 
Tel: U ft WIHl Email: 
w * m * wmi HSDN 

HTSN: 




Pol icy Advisor 

Office for Civil Rights & Civil Liberties 

Depar tment of H omela nd Security 

Office: 

Cell: 

Fax: 




From: Byers, Shala 

Sent: Monday, October 17, 2011 11:30 AM 

To: CRCL Produ ct Review; P rivreview 

Cc: SL_Support;^^^^^| 

Subject: Guidance Requested: Occupy Wall Street 



(b) (6) 



All, 

We have received a number of questions and requests for information regarding Occupy Wall Street from a number of 
component partners and intelligence officers. Recognizing that this is a first amendment-protected activity, we have 
recommended (on an ad hoc basis when we received requests) that our Intelligence Officers refer inquiries to Fusion 
Centers and avoid the topic altogether. That being said, given the number of requests that have appeared, we would 
like to equip the field with formal guidance as they will likely continue to receive requests like this from Fusion Center 
partners. We would greatly appreciate formal guidance from CRCL and/or Privacy (whatever you all would prefer to do) 
sooner rather than later to make sure the all in the field are acting in accordance with CRCL and Privacy policies. Thank 
you for your help! 

Also, if you could, please cc SL Support on the response as they are the intake point for requests and it would be helpful 
for them to have this on hand to provide in case someone misses our e-mail. 

Best, 



Shala Byers 

Intelligence Coordination Branch 

State and Local Program Office 

Intelligence and Analysis Directorate 

Depart] 




b (6) 



From: 

Sent: 

To: 

Subject: 

Attachments: 



(b) (6) 



Monday, October 24, 201 1 2:37 PM 



(b) (6) 



Kb: (U/hUUU) Occupy Pittsburgh Threat Assessment 

10-24-1 1 regarding Pittsburg Office of Emerency Management and Homeland 

Security_CRCL.docx 



DELIBERATIVE 



Hi 



(b) (6) 



I think that[mm |foundation and the culling down you did look great. I made a few very minor tweaks for your 
consideration. My changes sought to take out language that indicates our guidelines are mandatory. For instance 
replace "personnel must" with "personnel should". 



I also recommend that we advise only the DHS people - and remain silent on whether they should pass along our input 
to the Pittsburgh folks. 

Please see the attached document with my recommendations. 



(b) (6) 




(b) (6) 



From: 

Se nt: Monday, Octob er 24, 2011 1:40 PM 

To:[£I£^^H 

Subject: RE: (U/FOUO) Occupy Pittsburgh Threat Assessment 



Hi 



(b) (6) 




(b) (6) 



From: 

Se nt: Friday, October 07, 2011 10:04 AM 

To: 

Cc: 

Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 



(b) (6) 



,(b) (6) 
(b) (6) 



(b) (6) 



I left both of you voice mail messages in which I described this issue in greater detail. 
There is attached to this email a threat bulletin being disseminated by the Office of Emergency Management in Pittsburgh 
in which it discusses the th reat posed by the Occupy Pittsburgh campaign and the hackers' group: Anonymous. Both 
myself and [01©] (IO deployed to the PACIC Center in Harrisburg) are somewhat concerned that several items 



contained in this Intel Bulletin might be advocating surveillance and other countermeasures to be employed against 
activities protected und er the 1 st Amend ment. Would either one or both of you be able to see what could be developed 
from this document that [0K^^^^H could take back to the Intel staff that produced this so that in the future they have a 
greater awareness of how to develop intelligence assessments that don't undermine Constitutionally protected speech and 
assembly rights? 
Thanks in advanced, really appreciate all your help. 



(b) (6) 



From: 

Se nt: Friday, O ctober 07, 2011 9:52 AM 

To:[i2I2M 

Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 




1 As discussed. Pittsburgh published and distributed this assessment yesterday. I'm just looking for some help in 
guiding their personnel on what should and shouldn't be said concerning planned, legal demonstrations. Thanks for 
your help. 




(b) (6) 



From:[]g|g| | [mailto: 

Se nt: Thursday, October 06, 2011 3:06 PM 

To: 




Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 



FYI, 
IS! 




(b) (6) 



Field Intelligence Officer 
Transportation Security Administration 
Western Pennsy lvania and West Virginia 

o 



(b) (6) 
(b) (6) 



(412) 472-8018 f 



(b) (6) 



From: 

Se nt: Thursday, Oct ober 06, 2011 2:51 PM 

To:[£Ig^^H 

Subject: (U/FOUO) Occupy Pittsburgh Threat Assessment 



Attached is a product concerning the Occupy Pittsburgh event planned for October 15, 2011 and Feedback Form. As 
always, your feedback is appreciated. 

Please disseminate as appropriate. 



(b) (6) 



PCP 



Emergency Management Specialist/ Planner 
City of Pittsburgh 

Office of Emergency Management and Homeland Security 



200 Ross Street, Fifth Floor 
Pittsb urgh PA 15219 
Main:[0t@^^^H 
Fax: 4T?Z5tt65F 
Cell: 



(b) (6) 



http://www.facebook.com/pqh.ema 
http://twitter.com/PittsburqhOEMHS 



http://www.pittsburqhpa.gov/ema/ 



b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 



(b) (6) 



Monday, October 24, 201 1 4:39 PM 



(b) (6) 



(b) (6) 
(b) (6) 



hW: Alert Update! Eugene, OR. .Wednesday, October 14, 2011..Possilbe Eco-Terrorism 
Attack On SUV 





and 

Good afternoon. Im^^i^XQ^I a Domestic Terrorism analyst with the Homeland Counterterrorism Division. I ran 
across this today and was interested in a possible write up of the event for the state and locals. Before I spent the time 
writing on this, however, I'd like to know what objections CRCL might pose to such a product concerning the Occupy 
movement— which has thus far been nonviolent. Please take a look at below and let me know what you think. 



Best, 



(b) (6) 



DHS Office of Intelligence and Analysis 
Homeland Counterterrorism Division 
Homegrown Violent Extremism Branch 
Domestic Terrorism Analyst 
Desk: 



(b) (6) 



Warning: This communication, along with any attachments, is covered by federal and state law governing electronic 
communications and may contain confidential and legally privileged information such as found under 49 CFR 1520 or the 
Privacy Act of 1974. It should not be communicated to any person, or agency, unless disclosure is in performance of 
official DHS duties and there exists a valid need to know. If the reader of this message is not the intended recipient, you 
are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited. If you have 
received this in error, please reply immediately to the sender and delete this message. Thank you. 



New post on GREY COAST ANARCHIST NEWS 



s 



Eugene: SUV covered in anti-oil, pro-occupation graffiti and set on fire 

by greycoast4narchists 

From RegisterGuard. October 14, 2011. 



Perhaps the people responsible for torching a graffiti-covered Toyota 4-Runner in west Eugene on Wednesday night 
really did want to send a political message. 



But at this point, police say they don't know who set the fire or why they did it — despite the fact that the burned 
sport utility vehicle was covered with miscellaneous graffiti that included an anarchist symbol and messages 
consistent with those of the nationwide "Occupy" movement protesting economic inequities. 

Eugene police spokeswoman Melinda McLaughlin said it would be "unfair to blame any one group" for the arson. 

"The graffiti is all over the map," she said. 

Eugene firefighters rushed to the corner of West 13th Avenue and Grant Street just after 9 p.m. Wednesday and 
found the red SUV engulfed in flames. Police arrived at the scene a short time later and determined that the blaze had 
been set intentionally. The damage was estimated at $5,000. 

Before lighting the vehicle on fire, someone had used white paint to scrawl onto the vehicle a number of messages 
that included "Occupy Eugene," "99%," "Oil is Bad" and "No Exxon" — along with an anarchist symbol and a 
profanity directed toward Eugene Mayor Kitty Piercy, police said. 

Piercy said she spoke Thursday with police about the fire, and added that she hopes authorities track down the people 
behind the "dangerous" incident. 

"Of course I don't like to see hateful graffiti aimed at me or anyone else," Piercy said. "Especially when it is linked 
to a violent act such as this one." 

Meanwhile, organizers with Occupy Eugene — an offshoot of the national movement that last month began staging 
demonstrations on Wall Street — were quick to distance their group from the arson. 

Occupy Eugene spokeswoman Crystal Stanford said the group is part of "a peaceful movement" that does not 
condone violence or property destruction. 

"My first thought (upon hearing of the SUV fire) was that people would think that we were on the fringe," Stanford 
said. "We're a populist movement, and our values are consistent with the values of the everyday, normal person." 

She added that group members "love the mayor. Kitty Piercy is on our team." 

While he said he had no idea who might be responsible for the fire, Eugene author and anarchist John Zerzan said he 
is certain anarchists are participating in "Occupy" events locally and elsewhere, and that their beliefs differ greatly 
from "peaceniks" who "never want to get off the sidewalk." 

"Some people want to take (the movement) in a militant direction, and some don't," Zerzan said. 

Police continue to investigate the arson case. 

McLaughlin said the 4-Runner's most recent registered owner — who does not live in Eugene — sold it about a year 






ago. 

She said investigators did not want to publicly identify the person to whom it was sold. 

Police have not spoken with any witnesses who saw the fire being set. 

Neighbors on Thursday said they did not recognize the vehicle as belonging to anyone in the area. 

In 2000, a pair of self-proclaimed anarchists in Eugene set fire to three SUVs at the former Romania truck lot off 
Franklin Boulevard. 

The two men, Jeffrey Luers and Craig Marshall, later pleaded guilty to arson charges and went to prison. 



Thanks for flying with Lfa^VordPress 



.com 



b (6) 



From: 
Sent: 
To: 
Subject: 



(b) (6) 



Monday, October 24, 201 1 5:04 PM 



(b) (6) 



Kb: (U/hUUU) Occupy Pittsburgh Threat Assessment 



DELIBERATIVE 

Yes I think that making ourselves available for further discussion is totally reasonable and a good policy. I support that 
offer © 



(b) (6) 



OtticeBiWft 




(b) (6) 



From: 

Se nt: Monday, Octob er 24, 2011 2:55 PM 

To:[£Ig^^H 

Subject: RE: (U/FOUO) Occupy Pittsburgh Threat Assessment 



DELIBERATIVE 



Thanks 



(b) (6) 



Also, thanks for marking the material- my oversight. Good catch. Just to be sure, did your good with the last sentence 
of making an offer to discuss with the fusion center? 



(b) (6) 



From: 

Se nt: Monday, Oct ober 24, 2011 2:37 PM 

To:[£Ig^^H 

Subject: RE: (U/FOUO) Occupy Pittsburgh Threat Assessment 



DELIBERATIVE 



Hi 



(b) (6) 



I think that[mm |foundation and the culling down you did look great. I made a few very minor tweaks for your 
consideration. My changes sought to take out language that indicates our guidelines are mandatory. For instance 
replace "personnel must" with "personnel should". 



I also recommend that we advise only the DHS people - and remain silent on whether they should pass along our input 
to the Pittsburgh folks. 

Please see the attached document with my recommendations. 



(b) (6) 




(b) (6) 



From: 

Se nt: Monday, Octob er 24, 2011 1:40 PM 

To:Qs^iJ|^H 

Subject: RE: (U/FOUO) Occupy Pittsburgh Threat Assessment 



Hi 



(b) (6) 



(b) (5), (b) (6) 




(b) (6) 



From: 

Se nt: Friday, October 07, 2011 10:04 AM 

To: 

Cc: 

Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 



(b) (6) 



,(b) (6) 
(b) (6) 



(b) (6) 



I left both of you voice mail messages in which I described this issue in greater detail. 
There is attached to this email a threat bulletin being disseminated by the Office of Emergency Management in Pittsburgh 
in which it discusses the th reat posed by the Occupy Pittsburgh campaign and the hackers' group: Anonymous. Both 
myself and|QK^^^^^H (IO deployed to the PACIC Center in Harrisburg) are somewhat concerned that several items 
contained in this Intel Bulletin might be advocating surveillance and other countermeasures to be employed against 
activities protected und er the 1 st Amend ment. Would either one or both of you be able to see what could be developed 
from this document that |©H(j^^^^H could take back to the Intel staff that produced this so that in the future they have a 
greater awareness of how to develop intelligence assessments that don't undermine Constitutionally protected speech and 
assembly rights? 
Thanks in advanced, really appreciate all your help. 



(b) (6) 



From: 

Se nt: Friday, O ctober 07, 2011 9:52 AM 

To:[i2I2M 

Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 



|m | As discussed. Pittsburgh published and distributed this assessment yesterday. I'm just looking for some help in 
guiding their personnel on what should and shouldn't be said concerning planned, legal demonstrations. Thanks for 
your help. 




(b) (6) 



From:|mm | [mailto: 

Se nt: Thursday, October 06, 2011 3:06 PM 

To: 




Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 



FYI, 
IS] 




(b) (6) 



Meld Intelligence Officer 
Transportation Security Administration 
Western Pennsy lvania and West Virginia 

o 



(b) (6) 
(b) (6) 



(412) 472-8018 f 



(b) (6) 



From: 

Se nt: Thursday, Oct ober 06, 2011 2:51 PM 

to: [gagjijj^i 

Subject: (U/FOUO) Occupy Pittsburgh Threat Assessment 



Attached is a product concerning the Occupy Pittsburgh event planned for October 15, 2011 and Feedback Form. As 
always, your feedback is appreciated. 

Please disseminate as appropriate. 



(b) (6) 



PCP 



Emergency Management Specialist/ Planner 
City of Pittsburgh 

Office of Emergency Management and Homeland Security 

200 Ross Street, Fifth Floor 

Pittsb urgh PA 15219 

Main:[0M@^^^H 

Fax: 4t5z5^53? 

Cell: 



(b) (6) 



http://www.facebook.com/pqh.ema 
http://twitter.com/PittsburghOEMHS 



http://www.pittsburqhpa.gov/ema/ 



b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 

Attachments: 



(b) (6) 



Monday, October 24, 2011 5:15 PM 



(b) (6) 



occupy wan street Request 

FW: Alert Update! Eugene, OR. .Wednesday, October 14, 2011..Possilbe Eco-Terrorism 

Attack On SUV 



Hey 



(b) (6) 



I saw the request that came in for guidance on whether l&A can do a product on Occupy Wall Street. We got a similar 
request from SLPO last week and we collaborated with Privacy to come up with a joint response. The response below 
was cleared bv [01(31 1 1 wanted to share this with you to initiate our discussion: 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged in constitutionally 
protected activity. We maintain our longstanding position that DHS should not report on activities when the basis for 
reporting is political speech. We would also be loath to pass DHS requests for more information on the protests along to 
the appropriate fusion centers without strong guidance that the vast majority of activities occurring as part of these 
protests is protected. To do otherwise might give the appearance that DHS is attempting to circumvent existing 
restrictions, policies, and laws. 

To a large degree, these protests are no different from any other protests/events from civil liberties, civil rights and 
privacy perspectives. The issue is not the assembly of the groups nor the message of the participants, it is only (as far as 
DHS is concerned) illegal or suspicious behavior related to a DHS mission that occurs during the protests. A possible 
exception would be reports on the environment created at the protests sites that would endanger public health and safety, 
where the health and safety concern relates to a DHS mission. 

So there are certainly some circumstances that may allow limited reporting on behavior that is coincident and collocated 
with Occupy Wall Street-like protests. Persons demonstrating illegal or suspicious behavior and attempting to use the 
protests to obscure their activity could be reported, as long as there is no attempt to link the suspicious/illegal behavior to 
first amendment protected activity. Indeed, the normal CRCL and PRIV guidance used for HIRs and intelligence products 
would apply, as it is only the behavior which is being addressed. 

It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what type of information 
is being requested, if we were to reconsider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we would be happy 
to start the drafting process. Undoubtedly, drafting formal guidance would require a bit more time to gain the necessary 
clearances. 



(b) (6) 



Pol icy Advisor 

Office for Civil Rights & Civil Liberties 

Department of Homeland Security 

Office: 

Cell: 

Fax: (202) 357-8298 




b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 



(b) (6) 



Monday, October 24, 201 1 4:39 PM 



(b) (6) 



(b) (6) 

(b) (6) 



hw: Alert update! Eugene, OR. .Wednesday, October 14, 2011..Possilbe Eco-Terrorism 
Attack On SUV 





and 

Good afternoon. l'm[©lS3^^^| a Domestic Terrorism analyst with the Homeland Counterterrorism Division. I ran 
across this today and was interested in a possible write up of the event for the state and locals. Before I spent the time 
writing on this, however, I'd like to know what objections CRCL might pose to such a product concerning the Occupy 
movement— which has thus far been nonviolent. Please take a look at below and let me know what you think. 



Best, 



(b) (6) 



DHS Office of Intelligence and Analysis 
Homeland Counterterrorism Division 
Homegrown Violent Extremism Branch 
Domestic Terrorism Analyst 
Desk: 



(b) (6) 



Warning: This communication, along with any attachments, is covered by federal and state law governing electronic 
communications and may contain confidential and legally privileged information such as found under 49 CFR 1520 or the 
Privacy Act of 1974. It should not be communicated to any person, or agency, unless disclosure is in performance of 
official DHS duties and there exists a valid need to know. If the reader of this message is not the intended recipient, you 
are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited. If you have 
received this in error, please reply immediately to the sender and delete this message. Thank you. 



New post on GREY COAST ANARCHIST NEWS 



s 



Eugene: SUV covered in anti-oil, pro-occupation graffiti and set on fire 

by greycoast4narchists 

From RegisterGuard. October 14, 2011. 



Perhaps the people responsible for torching a graffiti-covered Toyota 4-Runner in west Eugene on Wednesday night 
really did want to send a political message. 



But at this point, police say they don't know who set the fire or why they did it — despite the fact that the burned 
sport utility vehicle was covered with miscellaneous graffiti that included an anarchist symbol and messages 
consistent with those of the nationwide "Occupy" movement protesting economic inequities. 

Eugene police spokeswoman Melinda McLaughlin said it would be "unfair to blame any one group" for the arson. 

"The graffiti is all over the map," she said. 

Eugene firefighters rushed to the corner of West 13th Avenue and Grant Street just after 9 p.m. Wednesday and 
found the red SUV engulfed in flames. Police arrived at the scene a short time later and determined that the blaze had 
been set intentionally. The damage was estimated at $5,000. 

Before lighting the vehicle on fire, someone had used white paint to scrawl onto the vehicle a number of messages 
that included "Occupy Eugene," "99%," "Oil is Bad" and "No Exxon" — along with an anarchist symbol and a 
profanity directed toward Eugene Mayor Kitty Piercy, police said. 

Piercy said she spoke Thursday with police about the fire, and added that she hopes authorities track down the people 
behind the "dangerous" incident. 

"Of course I don't like to see hateful graffiti aimed at me or anyone else," Piercy said. "Especially when it is linked 
to a violent act such as this one." 

Meanwhile, organizers with Occupy Eugene — an offshoot of the national movement that last month began staging 
demonstrations on Wall Street — were quick to distance their group from the arson. 

Occupy Eugene spokeswoman Crystal Stanford said the group is part of "a peaceful movement" that does not 
condone violence or property destruction. 

"My first thought (upon hearing of the SUV fire) was that people would think that we were on the fringe," Stanford 
said. "We're a populist movement, and our values are consistent with the values of the everyday, normal person." 

She added that group members "love the mayor. Kitty Piercy is on our team." 

While he said he had no idea who might be responsible for the fire, Eugene author and anarchist John Zerzan said he 
is certain anarchists are participating in "Occupy" events locally and elsewhere, and that their beliefs differ greatly 
from "peaceniks" who "never want to get off the sidewalk." 

"Some people want to take (the movement) in a militant direction, and some don't," Zerzan said. 

Police continue to investigate the arson case. 

McLaughlin said the 4-Runner's most recent registered owner — who does not live in Eugene — sold it about a year 






ago. 

She said investigators did not want to publicly identify the person to whom it was sold. 

Police have not spoken with any witnesses who saw the fire being set. 

Neighbors on Thursday said they did not recognize the vehicle as belonging to anyone in the area. 

In 2000, a pair of self-proclaimed anarchists in Eugene set fire to three SUVs at the former Romania truck lot off 
Franklin Boulevard. 

The two men, Jeffrey Luers and Craig Marshall, later pleaded guilty to arson charges and went to prison. 



Thanks for flying with Lfa^VordPress 



.com 



b (6) 



From: 

Sent: 

To: 

Subject: 

Attachments: 



(b) (6) 



hriday, October 28, 201 1 2:52 PM 



(b) (6) 



(b) (6) 



Kb: u/hUUU) uccupy HttsDurgn I hreat Assessment (DELIBERATIVE) 
10-24-1 1 regarding J^sburgOffice of Emerency Management and Homeland 
Security_CRCL withMandMedits MRM.docx 



(b) (6) 




(b) (6) 



Esq. 



Policy Advisor 
Office for Civil Rights & Civil Liberties 
Department of H omeland Security 

(o) 

(c) 

This message may contain attorney-client communications or agency deliberative communications, all of which may be privileged 
and not subject to disclosure outside the agency or to the public. Please consult with the Department of Homeland Security, Office 
of General Counsel before disclosing any information contained in this email. 



(b) (6) 
(b) (6) 



(b) (6) 



From: 

Se nt: Tuesday, October 25, 2011 1:3 PM 

To:[£Ig^^H[£Ig^^H 

Subject: RE: U/FOUO) Occupy Pittsburgh Threat Assessment (DELIBERATIVE) 



Hi 



(b) (6) 




(b) (6) 



Senior Pol icy Advisor 

I ntelligence, Security, and I nformation Sharing (I SI S) Section 

Office for Civil Rights & Civil Liberties 

Department of Homeland Security 

Office: 

Blackberry: 

Fax: (202) 357-8341 

email: 

J Wl CST 



(b) (6) 



(b) (6) 
(b) (6) 



(b) (6) 



From: 

Se nt: Tuesday, October 11, 2011 5:2 3 PM 

to: [jsHjaJI^H b-h^h 

Subject: FW: U/FOUO) Occupy Pittsburgh Threat Assessment (DELIBERATIVE) 




illl* 



&H2 




Attached please find my first crack at a response to the Pittsburgh threat assessment. Per the way[g^yj has raised this 
issue to us, I'm focusing on general principles (with some digressions on how they would apply to the product in 
question), rather than redlining the actual report. I spoke with[mS^^^H on Friday and got some additional detail 
about the fusion center in question and how this product came to be that I think will be helpful as you look at what I've 
written. Can we meet briefly tomorrow to discuss? 



(b) (6) 




Esq. 

Policy Advisor 

Office for Civil Rights & Civil Liberties 

Department of H omeland Security 

(o) 

(c) 

This message may contain attorney-client communications or agency deliberative communications, all of which may be privileged 
and not subject to disclosure outside the agency or to the public. Please consult with the Department of Homeland Security, Office 
of General Counsel before disclosing any information contained in this email. 



(b) (6) 
(b) (6) 



(b) (6) 



From: 

Se nt: Friday, Octo ber 07, 2011 10:14 AM 

To: 

Cc: 

Subject: FW: U/FOUO) Occupy Pittsburgh Threat Assessment 




(b) (6) 



As we discussed. 



■ b (6) 



From: [my] | [mailt< 

Se nt: Friday, Octob er 07, 2011 10:07 AM 

To:QsagJi^H 

Subject: U/FOUO) Occupy Pittsburgh Threat Assessment 



(b) (6) 



From: 

Se nt: Friday, October 07, 2011 10:04 AM 

To: 

Cc: 

Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 



(b) (6) 



,(b) (6) 
(b) (6) 



(b) (6) 



I left both of you voice mail messages in which I described this issue in greater detail. 
There is attached to this email a threat bulletin being disseminated by the Office of Emergency Management in Pittsburgh 
in which it discusses the th reat posed by the Occupy Pittsburgh campaign and the hackers' group: Anonymous. Both 
myself and|QK^^^^^H (IO deployed to the PACIC Center in Harrisburg) are somewhat concerned that several items 
contained in this Intel Bulletin might be advocating surveillance and other countermeasures to be employed against 
activities protected und er the 1 st Amend ment. Would either one or both of you be able to see what could be developed 
from this document lhal[0Kj| could take back to the Intel staff that produced this so that in the future they have a 



greater awareness of how to develop intelligence assessments that don't undermine Constitutionally protected speech and 

assembly rights? 

Thanks in advanced, really appreciate all your help. 



(b) (6) 



From: 

Se nt: Friday, O ctober 07, 2011 9:52 AM 

To:Q2^B 

Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 



|m | As discussed. Pittsburgh published and distributed this assessment yesterday. I'm just looking for some help in 
guiding their personnel on what should and shouldn't be said concerning planned, legal demonstrations. Thanks for 
your help. ' 




(b) (6) 



From:[]g|g| | [mailto: 

Se nt: Thursday, October 06, 2011 3:06 PM 
To: 




Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 



FYI, 

IB 




(b) (6) 



Held Intelligence Officer 
Transportation Security Administration 
Western Pennsy lvania and West Virginia 

o 



(b) (6) 
(b) (6) 



(412) 472-8018 f 



(b) (6) 



From: 

Se nt: Thursday, Oct ober 06, 2011 2:51 PM 

To:[£Ig^^H 

Subject: (U/FOUO) Occupy Pittsburgh Threat Assessment 



Attached is a product concerning the Occupy Pittsburgh event planned for October 15, 2011 and Feedback Form. As 
always, your feedback is appreciated. 

Please disseminate as appropriate. 



(b) (6) 



PCP 



Emergency Management Specialist/ Planner 
City of Pittsburgh 

Office of Emergency Management and Homeland Security 
200 Ross Street, Fifth Floor 
Pittsburgh PA 15219 
Main: 



(b) (6) 



Fax:412-255-8662 
Cell: 



(b) (6) 



http://www.facebook.com/pgh.ema 
http://twitter.com/PittsburqhOEMHS 



http://www.pittsburghpa.gov/ema/ 



b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 



(b) (6) 



Monday, October 31 , 201 1 10:22 AM 



(b) (6) 



Kb: uccupy wall Street Request 



DELIBERATIVE 



Hey 



(b) (6) 



I agree with your concern. I think you've drafted a good response below. My only point of divergence is that I believe a 
product written about the incident of vandalism, if it does not attribute the vandalism to OWS would not be a Homeland 
Security issue. Although this question falls within OGC's authority to determine, if the basis for reporting is a single 
incident, not the general movement, the single incident does not appear to be a Homeland Security issue. 

I fear that no matter how you parse a potential report, any product on OWS which seeks to report on the movement in 
general, or the potential for violence nationwide would be largely reporting on First Amendment-protected activity. 

I am concerned that this may be misinterpreted by recipients or lead to improper action on the basis of an l&A report. 

I'm happy to discuss this further with you. Please let me know what you think. 



(b) (6) 




(b) (6) 



From: 

Se nt: Monday, Octob er 31, 2011 10:08 AM 

To: 

Cc: 

Subject: RE: Occupy Wall Street Request 







(b) (6) 



Esq. 



Policy Advisor 

Office for Civil Rights & Civil Liberties 

Department of H omeland Security 

(o) 

(c) 
This message may contain attorney-client communications or agency deliberative communications, all of which may be privileged 

and not subject to disclosure outside the agency or to the public. Please consult with the Department of Homeland Security, Office 

of General Counsel before disclosing any information contained in this email. 



(b) (6) 
(b) (6) 



(b) (6) 



From: 

Se nt: Monday, Oc tober 24, 2011 5:15 PM 

To: 

Cc: 

Subject: Occupy Wall Street Request 




Hey 



(b) (6) 



I saw the request that came in for guidance on whether l&A can do a product on Occupy Wall Street. We got a similar 
request from SLPO last week and we collaborated with Privacy to come up with a joint response. The response below 
was cleared bv [01(31 1 1 wanted to share this with you to initiate our discussion: 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged in constitutionally 
protected activity. We maintain our longstanding position that DHS should not report on activities when the basis for 
reporting is political speech. We would also be loath to pass DHS requests for more information on the protests along to 
the appropriate fusion centers without strong guidance that the vast majority of activities occurring as part of these 
protests is protected. To do otherwise might give the appearance that DHS is attempting to circumvent existing 
restrictions, policies, and laws. 

To a large degree, these protests are no different from any other protests/events from civil liberties, civil rights and 
privacy perspectives. The issue is not the assembly of the groups nor the message of the participants, it is only (as far as 
DHS is concerned) illegal or suspicious behavior related to a DHS mission that occurs during the protests. A possible 
exception would be reports on the environment created at the protests sites that would endanger public health and safety, 
where the health and safety concern relates to a DHS mission. 



So there are certainly some circumstances that may allow limited reporting on behavior that is coincident and collocated 
with Occupy Wall Street-like protests. Persons demonstrating illegal or suspicious behavior and attempting to use the 
protests to obscure their activity could be reported, as long as there is no attempt to link the suspicious/illegal behavior to 
first amendment protected activity. Indeed, the normal CRCL and PRIV guidance used for HIRs and intelligence products 
would apply, as it is only the behavior which is being addressed. 

2 



It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what type of information 
is being requested, if we were to reconsider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we would be happy 
to start the drafting process. Undoubtedly, drafting formal guidance would require a bit more time to gain the necessary 
clearances. 



(b) (6) 



Pol icy Advisor 

Office for Civil Rights & Civil Liberties 

Department of Homeland Security 

Office: 

Cell: 

Fax: (202) 357-8298 




b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 



(b) (6) 



(b) (6) 
(b) (6) 





(b) (6) 



Esq. 



Policy Advisor 
Office for Civil Rights & Civil Liberties 
Department of H omeland Security 

(o) 

(c) 

This message may contain attorney-client communications or agency deliberative communications, all of which may be privileged 

and not subject to disclosure outside the agency or to the public. Please consult with the Department of Homeland Security, Office 
of General Counsel before disclosing any information contained in this email. 



(b) (6) 
(b) (6) 



(b) (6) 



From: 

Se nt: Monday, Oc tober 24, 2011 5:15 PM 

To: 

Cc: 

Subject: Occupy Wall Street Request 




Hey 



(b) (6) 



I saw the request that came in for guidance on whether l&A can do a product on Occupy Wall Street. We got a similar 
request from SLPO last week and we collaborated with Privacy to come up with a joint response. The response below 
was cleared bv [01(31 1 1 wanted to share this with you to initiate our discussion: 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged in constitutionally 
protected activity. We maintain our longstanding position that DHS should not report on activities when the basis for 
reporting is political speech. We would also be loath to pass DHS requests for more information on the protests along to 
the appropriate fusion centers without strong guidance that the vast majority of activities occurring as part of these 
protests is protected. To do otherwise might give the appearance that DHS is attempting to circumvent existing 
restrictions, policies, and laws. 

To a large degree, these protests are no different from any other protests/events from civil liberties, civil rights and 
privacy perspectives. The issue is not the assembly of the groups nor the message of the participants, it is only (as far as 
DHS is concerned) illegal or suspicious behavior related to a DHS mission that occurs during the protests. A possible 
exception would be reports on the environment created at the protests sites that would endanger public health and safety, 
where the health and safety concern relates to a DHS mission. 

So there are certainly some circumstances that may allow limited reporting on behavior that is coincident and collocated 
with Occupy Wall Street-like protests. Persons demonstrating illegal or suspicious behavior and attempting to use the 
protests to obscure their activity could be reported, as long as there is no attempt to link the suspicious/illegal behavior to 
first amendment protected activity. Indeed, the normal CRCL and PRIV guidance used for HIRs and intelligence products 
would apply, as it is only the behavior which is being addressed. 

It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what type of information 
is being requested, if we were to reconsider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we would be happy 
to start the drafting process. Undoubtedly, drafting formal guidance would require a bit more time to gain the necessary 
clearances. 



(b) (6) 



Pol icy Advisor 

Office for Civil Rights & Civil Liberties 

Department of Homeland Security 

Office: 

Cell: 

Fax: (202) 357-8298 




b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 



(b) (6) 



(b) (6) 
(b) (6) 



I expect that the analyst considers the single incident to be an incident of domestic terrorism (similar to ELF attacks on 
SUVs), and would argue that the DHS authority to report would be based on this being a suspected domestic terrorism 
incident. I think a reasonable case could be made for that. 



W/r/t a larger report on the Occupy movement, do you mean that you don't think CRCL could clear on any product on 
OWS, generally? I tend to agree that it would be difficult to clear on that, given that any concerns out of the movement 
thus far are local matters: reasonable time, place, and manner restrictions on protests, health and safety issues, etc, all 
seem to be situational awareness issues (not domestic terrorism-related) that apply only to locals dealing with particular 
protests, and therefore, lack a DHS nexus for reporting. Given that their only foray into illegal activity, as a movement, 
seems to be violating permit rules and clashes with the police over removals (mostly, but not exclusively, though civil 
disobedience tactics), a product would tend to appear as merely reporting on First Amendment activity. What do you 
think of adding this to my draft: 




This request was addressed to the two of us, but I think we need a CRCL-wide approved response. Why don't we finalize 
our proposed text, then send it to [01(91 I for clearance? 



(b) (6) 



Esq. 



Policy Advisor 
Office for Civil Rights & Civil Liberties 
Department of H omeland Security 

(o) 

(c) 

This message may contain attorney-client communications or agency deliberative communications, all of which may be privileged 

and not subject to disclosure outside the agency or to the public. Please consult with the Department of Homeland Security, Office 
of General Counsel before disclosing any information contained in this email. 



(b) (6) 
(b) (6) 



(b) (6) 



From: 

Se nt: Monday, Oc tober 31, 2011 10:22 AM 

To: 

Cc: 

Subject: RE: Occupy Wall Street Request 




DELIBERATIVE 



Hey 



(b) (6) 



I agree with your concern. I think you've drafted a good response below. My only point of divergence is that I believe a 
product written about the incident of vandalism, if it does not attribute the vandalism to OWS would not be a Homeland 
Security issue. Although this question falls within OGC's authority to determine, if the basis for reporting is a single 
incident, not the general movement, the single incident does not appear to be a Homeland Security issue. 

I fear that no matter how you parse a potential report, any product on OWS which seeks to report on the movement in 
general, or the potential for violence nationwide would be largely reporting on First Amendment-protected activity. 

I am concerned that this may be misinterpreted by recipients or lead to improper action on the basis of an l&A report. 

I'm happy to discuss this further with you. Please let me know what you think. 



(b) (6) 




(b) (6) 



From: 

Se nt: Monday, Octob er 31, 2011 10:08 AM 

To: 

Cc: 

Subject: RE: Occupy Wall Street Request 



(b) ( ) (b) (6) 





(b) (6) 



Esq. 



Policy Advisor 
Office for Civil Rights & Civil Liberties 
Department of H omeland Security 

(o) 

(c) 

This message may contain attorney-client communications or agency deliberative communications, all of which may be privileged 

and not subject to disclosure outside the agency or to the public. Please consult with the Department of Homeland Security, Office 
of General Counsel before disclosing any information contained in this email. 



(b) (6) 
(b) (6) 



(b) (6) 



From: 

Se nt: Monday, Oc tober 24, 2011 5:15 PM 

To: 

Cc: 

Subject: Occupy Wall Street Request 




Hey 



(b) (6) 



I saw the request that came in for guidance on whether l&A can do a product on Occupy Wall Street. We got a similar 
request from SLPO last week and we collaborated with Privacy to come up with a joint response. The response below 
was cleared bvMDIQl 1 1 wanted to share this with you to initiate our discussion: 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged in constitutionally 
protected activity. We maintain our longstanding position that DHS should not report on activities when the basis for 
reporting is political speech. We would also be loath to pass DHS requests for more information on the protests along to 
the appropriate fusion centers without strong guidance that the vast majority of activities occurring as part of these 
protests is protected. To do otherwise might give the appearance that DHS is attempting to circumvent existing 
restrictions, policies, and laws. 



To a large degree, these protests are no different from any other protests/events from civil liberties, civil rights and 
privacy perspectives. The issue is not the assembly of the groups nor the message of the participants, it is only (as far as 
DHS is concerned) illegal or suspicious behavior related to a DHS mission that occurs during the protests. A possible 
exception would be reports on the environment created at the protests sites that would endanger public health and safety, 
where the health and safety concern relates to a DHS mission. 

So there are certainly some circumstances that may allow limited reporting on behavior that is coincident and collocated 
with Occupy Wall Street-like protests. Persons demonstrating illegal or suspicious behavior and attempting to use the 
protests to obscure their activity could be reported, as long as there is no attempt to link the suspicious/illegal behavior to 
first amendment protected activity. Indeed, the normal CRCL and PRIV guidance used for HIRs and intelligence products 
would apply, as it is only the behavior which is being addressed. 

It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what type of information 
is being requested, if we were to reconsider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we would be happy 
to start the drafting process. Undoubtedly, drafting formal guidance would require a bit more time to gain the necessary 
clearances. 



(b) (6) 



Pol icy Advisor 

Office for Civil Rights & Civil Liberties 

Department of Homeland Security 

Office: 

Cell: 

Fax: (202) 357-8298 




b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 



(b) (6) 



(b) (6) 



D 



Hi 



(b) (6) 



I added one line to the beginning and I am comfortable with sending this draft response to 
agree with this add, can you please send to [19101 I for her review? 



(b) (6) 



for her review. If you 



Thanks, 



(b) (6) 




(b) (6) 



From: 

Se nt: Monday, Octob er 31, 2011 11:02 AM 

To: 

Cc: 

Subject: RE: Occupy Wall Street Request 




I expect that the analyst considers the single incident to be an incident of domestic terrorism (similar to ELF attacks on 
SUVs), and would argue that the DHS authority to report would be based on this being a suspected domestic terrorism 
incident. I think a reasonable case could be made for that. 

W/r/t a larger report on the Occupy movement, do you mean that you don't think CRCL could clear on any product on 
OWS, generally? I tend to agree that it would be difficult to clear on that, given that any concerns out of the movement 
thus far are local matters: reasonable time, place, and manner restrictions on protests, health and safety issues, etc, all 
seem to be situational awareness issues (not domestic terrorism-related) that apply only to locals dealing with particular 
protests, and therefore, lack a DHS nexus for reporting. Given that their only foray into illegal activity, as a movement, 
seems to be violating permit rules and clashes with the police over removals (mostly, but not exclusively, though civil 
disobedience tactics), a product would tend to appear as merely reporting on First Amendment activity. What do you 
think of adding this to my draft: 




This request was addressed to the two of us, but I think we need a CRCL-wide approved response. Why don't we finalize 
our proposed text, then send it to[Q|m for clearance? 

2 



(b) (6) 



Esq. 



Policy Advisor 

Office for Civil Rights & Civil Liberties 

Department of H omeland Security 

(o) 

(c) 

This message may contain attorney-client communications or agency deliberative communications, all of which may be privileged 
and not subject to disclosure outside the agency or to the public. Please consult with the Department of Homeland Security, Office 
of General Counsel before disclosing any information contained in this email. 



(b) (6) 
(b) (6) 



(b) (6) 



From: 

Se nt: Monday, Oc tober 31, 2011 10:22 AM 

To: 

Cc: 

Subject: RE: Occupy Wall Street Request 




DELIBERATIVE 



Hey 



(b) (6) 



I agree with your concern. I think you've drafted a good response below. My only point of divergence is that I believe a 
product written about the incident of vandalism, if it does not attribute the vandalism to OWS would not be a Homeland 
Security issue. Although this question falls within OGC's authority to determine, if the basis for reporting is a single 
incident, not the general movement, the single incident does not appear to be a Homeland Security issue. 

I fear that no matter how you parse a potential report, any product on OWS which seeks to report on the movement in 
general, or the potential for violence nationwide would be largely reporting on First Amendment-protected activity. 

I am concerned that this may be misinterpreted by recipients or lead to improper action on the basis of an l&A report. 

I'm happy to discuss this further with you. Please let me know what you think. 



(b) (6) 




(b) (6) 



From: 

Se nt: Monday, Octob er 31, 2011 10:08 AM 

To: 

Cc: 

Subject: RE: Occupy Wall Street Request 




(b) ( ) (b) (6) 




(b) (6) 



Esq. 



Policy Advisor 
Office for Civil Rights & Civil Liberties 
Department of H omeland Security 

(o) 

(c) 

This message may contain attorney-client communications or agency deliberative communications, all of which may be privileged 

and not subject to disclosure outside the agency or to the public. Please consult with the Department of Homeland Security, Office 
of General Counsel before disclosing any information contained in this email. 



(b) (6) 
(b) (6) 



(b) (6) 



From: 

Se nt: Monday, Oc tober 24, 2011 5:15 PM 

To: 

Cc: 

Subject: Occupy Wall Street Request 




Hey 



(b) (6) 



I saw the request that came in for guidance on whether l&A can do a product on Occupy Wall Street. We got a similar 
request from SLPO last week and we collaborated with Privacy to come up with a joint response. The response below 
was cleared bv [01(31 1 1 wanted to share this with you to initiate our discussion: 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged in constitutionally 
protected activity. We maintain our longstanding position that DHS should not report on activities when the basis for 
reporting is political speech. We would also be loath to pass DHS requests for more information on the protests along to 
the appropriate fusion centers without strong guidance that the vast majority of activities occurring as part of these 
protests is protected. To do otherwise might give the appearance that DHS is attempting to circumvent existing 
restrictions, policies, and laws. 



To a large degree, these protests are no different from any other protests/events from civil liberties, civil rights and 
privacy perspectives. The issue is not the assembly of the groups nor the message of the participants, it is only (as far as 
DHS is concerned) illegal or suspicious behavior related to a DHS mission that occurs during the protests. A possible 



exception would be reports on the environment created at the protests sites that would endanger public health and safety, 
where the health and safety concern relates to a DHS mission. 

So there are certainly some circumstances that may allow limited reporting on behavior that is coincident and collocated 
with Occupy Wall Street-like protests. Persons demonstrating illegal or suspicious behavior and attempting to use the 
protests to obscure their activity could be reported, as long as there is no attempt to link the suspicious/illegal behavior to 
first amendment protected activity. Indeed, the normal CRCL and PRIV guidance used for HIRs and intelligence products 
would apply, as it is only the behavior which is being addressed. 

It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what type of information 
is being requested, if we were to reconsider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we would be happy 
to start the drafting process. Undoubtedly, drafting formal guidance would require a bit more time to gain the necessary 
clearances. 



(b) (6) 



Pol icy Advisor 

Office for Civil Rights & Civil Liberties 

Department of Homeland Security 

Office: 

Cell: 

Fax: (202) 357-8298 




b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 



(b) (6) 



(b) (6) 



Sounds good. Thank you. 



(b) (6) 



(b) (6) 



From: 

Se nt: Monday, Oc tober 31, 2011 12:16 PM 

To: 

Cc: 

Subject: FW: Alert Update! Eugene, OR.. Wednesday, October 14, 2011..Possilbe Eco-Terrorism Attack On SUV 




Deliberative 



(b) (6) 



I tweaked the first sentence a bit. ( see below) With this change, you can send it up. At this point in time, I 
don't believe we need to circulate for a CRCL wide opinion on the matter at this point. 

Thanks 



(b) (6) 



*X* *X* *>£* *>£* *>£* *>£* *>£* *>£* *>£* *>£* *>£* *>£* *>£* *X* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* *-£* 
*Y* *"J* *"J* *y* *y* *y* *y* *y* *X* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* *T* 





(b) (6) 



Senior Pol icy Advisor 

I intelligence, Security, and I nformation Sharing (I SI S) Section 

Office for Civil Rights & Civil Liberties 

Department of Homeland Security 

Office: 

Blackberry: 

Fax: (202) 357-8341 

emai I : 

J Wl CST 




(b) (6) 
(b) (6) 



(b) (6) 



From: 

Se nt: Monday, Oct ober 31, 2011 11:49 AM 

To: 

Cc: 

Subject: FW: Alert Update! Eugene, OR.. Wednesday, October 14, 2011..Possilbe Eco-Terrorism Attack On SUV 




DELIBERATIVE 



(b) (6) 



Last week,[gjm and I received this request for CRCL's concerns regarding an incident of vandalism and arson in 
Eugene, OR, which might be tied to the Occupy movement, or might be related to eco-terrorism or other domestic 
terrorism. We've crafted a proposed response, but believe this is something we should probably coordinate a CRCL-wide 
response for. What do you think? 





(b) (6) 



Esq. 



Policy Advisor 
Office for Civil Rights & Civil Liberties 
Department of H omeland Security 

(o) 

(c) 

This message may contain attorney-client communications or agency deliberative communications, all of which may be privileged 

and not subject to disclosure outside the agency or to the public. Please consult with the Department of Homeland Security, Office 
of General Counsel before disclosing any information contained in this email. 



(b) (6) 
(b) (6) 




From: 

Se nt: Monday, October 24, 2011 4:3 9 PM 

To: 

Cc: 

Subject: FW: Alert Update! Eugene, OR.. Wednesday, October 14, 2011..Possilbe Eco-Terrorism Attack On SUV 




(b) (6) 



(b) (6) 



(b) (6) 



and 

Good afternoon. rm^^J^MO^I a Domestic Terrorism analyst with the Homeland Counterterrorism Division. I ran 
across this today and was interested in a possible write up of the event for the state and locals. Before I spent the time 
writing on this, however, I'd like to know what objections CRCL might pose to such a product concerning the Occupy 
movement— which has thus far been nonviolent. Please take a look at below and let me know what you think. 



Best, 



(b) (6) 



DHS Office of Intelligence and Analysis 
Homeland Counterterrorism Division 
Homegrown Violent Extremism Branch 
Domestic Terrorism Analyst 
Desk: 



(b) (6) 



b 




Eugene: SUV covered in anti-oil, pro-occupation graffiti and set on fire 

by greycoast4narchists 

From RegisterGuard. October 14, 2011. 

Perhaps the people responsible for torching a graffiti-covered Toyota 4-Runner in west Eugene on Wednesday night 
really did want to send a political message. 

But at this point, police say they don't know who set the fire or why they did it — despite the fact that the burned 
sport utility vehicle was covered with miscellaneous graffiti that included an anarchist symbol and messages 
consistent with those of the nationwide "Occupy" movement protesting economic inequities. 

Eugene police spokeswoman Melinda McLaughlin said it would be "unfair to blame any one group" for the arson. 

"The graffiti is all over the map," she said. 

Eugene firefighters rushed to the corner of West 13th Avenue and Grant Street just after 9 p.m. Wednesday and 
found the red SUV engulfed in flames. Police arrived at the scene a short time later and determined that the blaze had 
been set intentionally. The damage was estimated at $5,000. 

Before lighting the vehicle on fire, someone had used white paint to scrawl onto the vehicle a number of messages 
that included "Occupy Eugene," "99%," "Oil is Bad" and "No Exxon" — along with an anarchist symbol and a 
profanity directed toward Eugene Mayor Kitty Piercy, police said. 



Piercy said she spoke Thursday with police about the fire, and added that she hopes authorities track down the people 
behind the "dangerous" incident. 

"Of course I don't like to see hateful graffiti aimed at me or anyone else," Piercy said. "Especially when it is linked 
to a violent act such as this one." 

Meanwhile, organizers with Occupy Eugene — an offshoot of the national movement that last month began staging 
demonstrations on Wall Street — were quick to distance their group from the arson. 

Occupy Eugene spokeswoman Crystal Stanford said the group is part of "a peaceful movement" that does not 
condone violence or property destruction. 

"My first thought (upon hearing of the SUV fire) was that people would think that we were on the fringe," Stanford 
said. "We're a populist movement, and our values are consistent with the values of the everyday, normal person." 

She added that group members "love the mayor. Kitty Piercy is on our team." 

While he said he had no idea who might be responsible for the fire, Eugene author and anarchist John Zerzan said he 
is certain anarchists are participating in "Occupy" events locally and elsewhere, and that their beliefs differ greatly 
from "peaceniks" who "never want to get off the sidewalk." 

"Some people want to take (the movement) in a militant direction, and some don't," Zerzan said. 

Police continue to investigate the arson case. 

McLaughlin said the 4-Runner's most recent registered owner — who does not live in Eugene — sold it about a year 
ago. 

She said investigators did not want to publicly identify the person to whom it was sold. 

Police have not spoken with any witnesses who saw the fire being set. 

Neighbors on Thursday said they did not recognize the vehicle as belonging to anyone in the area. 

In 2000, a pair of self-proclaimed anarchists in Eugene set fire to three SUVs at the former Romania truck lot off 
Franklin Boulevard. 

The two men, Jeffrey Luers and Craig Marshall, later pleaded guilty to arson charges and went to prison. 






Thanks for flying with Lfa^VordPress 



.com 



b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 



(b) (6) 



(b) (6) 
(b) (6) 



(b) (6) 
lb) (6) 



Deaill 




Thanks for inquiring with CRCL as to concerns that we would have with regard to a write up of the incident in 
Oregon where an SUV was vandalized and set on fire. Given that the Occupy Wall Street-type protesters 
mostly are engaged in constitutionally protected activity, we maintain our longstanding position that DHS 
should not report on activities when the basis for reporting is political speech. 

As you note, the Occupy movement has thus far been largely non-violent. There have been some arrests, and 
any violence thus far seems to be limited to clashes between some individuals who are or may be associated 
with the movement (the order of events in Oakland doesn't seem to be clear) during attempts to remove 
protestors from certain locations or enforce curfews. 

In a product on the incident in Eugene, we'd be particularly concerned about attribution of the incident. The 
article notes that the police say they don't know who set the fire or why they did it, and while some of the 
graffiti contains slogans consistent with some of the Occupy movement's protests, the police say it would be 
"unfair to blame any one group" for the incident, and the spokesperson for Occupy Eugene denounced the event 
and said it was not part of their tactics. Unless there is other intelligence that indicates that the vandalism can be 
attributed to the group, the product would have to be very careful not to attribute the incident to the movement. 

If I&A believes the incident in Eugene merits nationwide reporting, it would be preferable for I&A to write up 
the incident in a manner that takes care not to attribute the action to Occupy (absent further information), rather 
than to write a general product about Occupy and add to that product a write-up of the incident (as the context 
of the product would make it difficult to convey that we have no information that the incident may be fairly 
attributed to Occupy, rather than someone merely sympathetic to their ideology). Generally, it would be 
difficult for DHS to justify a product on the Occupy movement at this time. As you note, the movement has 
been largely non-violent, and what criminal activity has taken place has mostly been of the civil disobedience 
variety (failure to secure/overstaying permits, non- violent resistance to arrest), with occasional violent 
resistance to being removed from a location/arrested, etc., and it is unclear what is appropriately attributable to 
the Occupy movement versus individuals who may later enter into a conflict with policy. Other concerns appear 
to be health and safety related (use of heating equipment, disposal of trash, etc). As these concerns generally are 
localized and not related to domestic terrorism, to our knowledge, it would be difficult for DHS to justify a 
product on what is largely First Amendment protected activity that doesn't appear to have a nexus to a DHS 
mission. 



Please let us know if there's anything else we can do to help. 



(b) (6) 



(b) (6) 



From: 

Se nt: Monday, October 24, 2011 4:3 9 PM 

To: 



(b) (6) 




(b) (6) 



Cc: 

Subject: FW: Alert Update! Eugene, OR.. Wednesday, October 14, 2011..Possilbe Eco-Terrorism Attack On SUV 





and 

Good afternoon. l'm[©MI3^^^l a Domestic Terrorism analyst with the Homeland Counterterrorism Division. I ran 
across this today and was interested in a possible write up of the event for the state and locals. Before I spent the time 
writing on this, however, I'd like to know what objections CRCL might pose to such a product concerning the Occupy 
movement— which has thus far been nonviolent. Please take a look at below and let me know what you think. 



Best, 



(b) (6) 



DHS Office of Intelligence and Analysis 
Homeland Counterterrorism Division 
Homegrown Violent Extremism Branch 
Domestic Terrorism Analyst 
Desk: 



(b) (6) 



New post on GREY COAST ANARCHIST NEWS 



s 



Eugene: SUV covered in anti-oil, pro-occupation graffiti and set on fire 

by greycoast4narchists 

From RegisterGuard. October 14, 2011. 

Perhaps the people responsible for torching a graffiti-covered Toyota 4-Runner in west Eugene on Wednesday night 
really did want to send a political message. 

But at this point, police say they don't know who set the fire or why they did it — despite the fact that the burned 
sport utility vehicle was covered with miscellaneous graffiti that included an anarchist symbol and messages 
consistent with those of the nationwide "Occupy" movement protesting economic inequities. 



Eugene police spokeswoman Melinda McLaughlin said it would be "unfair to blame any one group" for the arson. 



"The graffiti is all over the map," she said. 

Eugene firefighters rushed to the corner of West 13th Avenue and Grant Street just after 9 p.m. Wednesday and 
found the red SUV engulfed in flames. Police arrived at the scene a short time later and determined that the blaze had 
been set intentionally. The damage was estimated at $5,000. 

Before lighting the vehicle on fire, someone had used white paint to scrawl onto the vehicle a number of messages 
that included "Occupy Eugene," "99%," "Oil is Bad" and "No Exxon" — along with an anarchist symbol and a 
profanity directed toward Eugene Mayor Kitty Piercy, police said. 

Piercy said she spoke Thursday with police about the fire, and added that she hopes authorities track down the people 
behind the "dangerous" incident. 

"Of course I don't like to see hateful graffiti aimed at me or anyone else," Piercy said. "Especially when it is linked 
to a violent act such as this one." 

Meanwhile, organizers with Occupy Eugene — an offshoot of the national movement that last month began staging 
demonstrations on Wall Street — were quick to distance their group from the arson. 

Occupy Eugene spokeswoman Crystal Stanford said the group is part of "a peaceful movement" that does not 
condone violence or property destruction. 

"My first thought (upon hearing of the SUV fire) was that people would think that we were on the fringe," Stanford 
said. "We're a populist movement, and our values are consistent with the values of the everyday, normal person." 

She added that group members "love the mayor. Kitty Piercy is on our team." 

While he said he had no idea who might be responsible for the fire, Eugene author and anarchist John Zerzan said he 
is certain anarchists are participating in "Occupy" events locally and elsewhere, and that their beliefs differ greatly 
from "peaceniks" who "never want to get off the sidewalk." 

"Some people want to take (the movement) in a militant direction, and some don't," Zerzan said. 

Police continue to investigate the arson case. 

McLaughlin said the 4-Runner's most recent registered owner — who does not live in Eugene — sold it about a year 
ago. 

She said investigators did not want to publicly identify the person to whom it was sold. 

Police have not spoken with any witnesses who saw the fire being set. 

Neighbors on Thursday said they did not recognize the vehicle as belonging to anyone in the area. 



In 2000, a pair of self-proclaimed anarchists in Eugene set fire to three SUVs at the former Romania truck lot off 
Franklin Boulevard. 

The two men, Jeffrey Luers and Craig Marshall, later pleaded guilty to arson charges and went to prison. 



Thanks for flying with Lfa^VordPress.com 



b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 



(b) (6) 



D 



(b) (6) 

(b)(6) |(b)(6) 



(b) (6) 



Thanksjg^m 1 1 appreciate you taking the time to look at this. It is very helpful for me to learn exactly what your 
objections would be prior to starting on a product. As of right now, I'm not planning on writing a product on this 
incident, but I'll be sure to keep your comments in mind as the Occupy movement drags along and more incidents pop 
up. Have a good one! 



Best, 



b (6) 



DHS Office of Intelligence and Analysis 
Homeland Counterterrorism Division 
Homegrown Violent Extremism Branch 
Domestic Terrorism Analyst 
Desk: 



(b)(6) 



b 



b 



(b) (6) 



From: 

Se nt: Monday, October 31, 2011 5:0 3 PM 

To: 

Cc: 

Subject: RE: Alert Update! Eugene, OR. .Wednesday, October 14, 2011..Possilbe Eco-Terrorism Attack On SUV 



(b) (6) 



,(b) (6) 
(b) (6) 



Dear 



i •in* 




Thanks for inquiring with CRCL as to concerns that we would have with regard to a write up of the incident in 
Oregon where an SUV was vandalized and set on fire. Given that the Occupy Wall Street-type protesters 
mostly are engaged in constitutionally protected activity, we maintain our longstanding position that DHS 
should not report on activities when the basis for reporting is political speech. 

As you note, the Occupy movement has thus far been largely non-violent. There have been some arrests, and 
any violence thus far seems to be limited to clashes between some individuals who are or may be associated 
with the movement (the order of events in Oakland doesn't seem to be clear) during attempts to remove 
protestors from certain locations or enforce curfews. 

In a product on the incident in Eugene, we'd be particularly concerned about attribution of the incident. The 
article notes that the police say they don't know who set the fire or why they did it, and while some of the 
graffiti contains slogans consistent with some of the Occupy movement's protests, the police say it would be 
"unfair to blame any one group" for the incident, and the spokesperson for Occupy Eugene denounced the event 



and said it was not part of their tactics. Unless there is other intelligence that indicates that the vandalism can be 
attributed to the group, the product would have to be very careful not to attribute the incident to the movement. 

If I&A believes the incident in Eugene merits nationwide reporting, it would be preferable for I&A to write up 
the incident in a manner that takes care not to attribute the action to Occupy (absent further information), rather 
than to write a general product about Occupy and add to that product a write-up of the incident (as the context 
of the product would make it difficult to convey that we have no information that the incident may be fairly 
attributed to Occupy, rather than someone merely sympathetic to their ideology). Generally, it would be 
difficult for DHS to justify a product on the Occupy movement at this time. As you note, the movement has 
been largely non-violent, and what criminal activity has taken place has mostly been of the civil disobedience 
variety (failure to secure/overstaying permits, non- violent resistance to arrest), with occasional violent 
resistance to being removed from a location/arrested, etc., and it is unclear what is appropriately attributable to 
the Occupy movement versus individuals who may later enter into a conflict with policy. Other concerns appear 
to be health and safety related (use of heating equipment, disposal of trash, etc). As these concerns generally are 
localized and not related to domestic terrorism, to our knowledge, it would be difficult for DHS to justify a 
product on what is largely First Amendment protected activity that doesn't appear to have a nexus to a DHS 
mission. 



Please let us know if there's anything else we can do to help. 



(b) (6) 



(b) (6) 



From: 

Se nt: Monday, October 24, 2011 4:3 9 PM 

To: 

Cc: 

Subject: FW: Alert Update! Eugene, OR.. Wednesday, October 14, 2011..Possilbe Eco-Terrorism Attack On SUV 




(b) (6) 



(b) (6) 



(b) (6) 



and 

Good afternoon. I'md^Q^^^I a Domestic Terrorism analyst with the Homeland Counterterrorism Division. I ran 
across this today and was interested in a possible write up of the event for the state and locals. Before I spent the time 
writing on this, however, I'd like to know what objections CRCL might pose to such a product concerning the Occupy 
movement— which has thus far been nonviolent. Please take a look at below and let me know what you think. 



Best, 



(b) (6) 



DHS Office of Intelligence and Analysis 
Homeland Counterterrorism Division 
Homegrown Violent Extremism Branch 
Domestic Terrorism Analyst 
Desk: 



(b) (6) 



b 



Eugene: SUV covered in anti-oil, pro-occupation graffiti and set on fire 

by greycoast4narchists 

From RegisterGuard. October 14, 2011. 

Perhaps the people responsible for torching a graffiti-covered Toyota 4-Runner in west Eugene on Wednesday night 
really did want to send a political message. 

But at this point, police say they don't know who set the fire or why they did it — despite the fact that the burned 
sport utility vehicle was covered with miscellaneous graffiti that included an anarchist symbol and messages 
consistent with those of the nationwide "Occupy" movement protesting economic inequities. 

Eugene police spokeswoman Melinda McLaughlin said it would be "unfair to blame any one group" for the arson. 

"The graffiti is all over the map," she said. 

Eugene firefighters rushed to the corner of West 13th Avenue and Grant Street just after 9 p.m. Wednesday and 
found the red SUV engulfed in flames. Police arrived at the scene a short time later and determined that the blaze had 
been set intentionally. The damage was estimated at $5,000. 

Before lighting the vehicle on fire, someone had used white paint to scrawl onto the vehicle a number of messages 
that included "Occupy Eugene," "99%," "Oil is Bad" and "No Exxon" — along with an anarchist symbol and a 
profanity directed toward Eugene Mayor Kitty Piercy, police said. 

Piercy said she spoke Thursday with police about the fire, and added that she hopes authorities track down the people 
behind the "dangerous" incident. 

"Of course I don't like to see hateful graffiti aimed at me or anyone else," Piercy said. "Especially when it is linked 
to a violent act such as this one." 

Meanwhile, organizers with Occupy Eugene — an offshoot of the national movement that last month began staging 
demonstrations on Wall Street — were quick to distance their group from the arson. 

Occupy Eugene spokeswoman Crystal Stanford said the group is part of "a peaceful movement" that does not 
condone violence or property destruction. 

"My first thought (upon hearing of the SUV fire) was that people would think that we were on the fringe," Stanford 



said. "We're a populist movement, and our values are consistent with the values of the everyday, normal person." 

She added that group members "love the mayor. Kitty Piercy is on our team." 

While he said he had no idea who might be responsible for the fire, Eugene author and anarchist John Zerzan said he 
is certain anarchists are participating in "Occupy" events locally and elsewhere, and that their beliefs differ greatly 
from "peaceniks" who "never want to get off the sidewalk." 

"Some people want to take (the movement) in a militant direction, and some don't," Zerzan said. 

Police continue to investigate the arson case. 

McLaughlin said the 4-Runner's most recent registered owner — who does not live in Eugene — sold it about a year 
ago. 

She said investigators did not want to publicly identify the person to whom it was sold. 

Police have not spoken with any witnesses who saw the fire being set. 

Neighbors on Thursday said they did not recognize the vehicle as belonging to anyone in the area. 

In 2000, a pair of self-proclaimed anarchists in Eugene set fire to three SUVs at the former Romania truck lot off 
Franklin Boulevard. 

The two men, Jeffrey Luers and Craig Marshall, later pleaded guilty to arson charges and went to prison. 



Thanks for flying with Lfa^VordPress 



.com 



b (6) 



From: 
Sent: 
To: 
Subject: 



(b) (6) 



(b) (6) 



D 



DELIBERATIVE 



(b) (6) 



As discussed, below is a draft email for your consideration. In light of the strategic decision to offer general guidance as a 
starting point, I inserted a sentence at the very end of the draft email below. The purpose of this additional sentence is 
to allow for a dialogue where we might offer more specific feedback, or respond to questions regarding the product in 
question. Absent specific questions, I don't believe we need to offer specific guidance on the product itself. Please let 
me know if you have any questions. 



(b) (6) 




b (6) 



From: 
Sent: 
To: 
Subject: 



(b) (6) 



(b) (6) 



D 



DRAFT EMAIL BELOW: 



(b) (6) 



I think you make good points. I'd like to use the specific guidance you've drafted in a very strategic manner. I believe it is 
in the best interest of our office to develop a positive working relationship with the folks who requested our input. In 
light of this goal, I'd like to initiate a dialogue with them by providing a general response and opening the door for 
further discussion. The strategic approach I intend to take is as follows: 

First, I will send an email that provides very high-level guidance and invites further dialogue. Out of this initial response I 
will ask the POC whether they have specific questions or concerns we have not fully addressed. 

Second, I anticipate that the POC may seek specific guidance that is the same vein of what you've drafted. I'd like to use 
the verbiage you sent in your last email the basis for providing detailed guidance. I would like to use the specific 
guidance you've drafted during the course of a dialogue, rather than send them all of our thoughts at once. 

I appreciate your write up of this and we'll re-engage on this topic once I hear back on my email to the POC. 

Thanks, 



(b) (6) 



From: 

Se nt: Friday, October 28, 2011 2:52 P M 

To:[£I£^^H;£I£i9i^H 

Subject: RE: U/FOUO) Occupy Pittsburgh Threat Assessment (DELIBERATIVE) 



(b) (6) 



I understand your discomfort with the level of detail in my first draft, as the Pittsburgh office has not asked us for advice. 
I do, however, think it would be helpful to give as detailed advice as possible without referencing a specific product, and 
in particular, to emphasize what I think is the major problem with this particular product (and has been an issue with 
other fusion centers): understanding the congruence concept as much as possible, and understanding that open source 
is not a license for reporting. With that in mind, I've taken another stab at a shorter and less specific but still fairly 
detailed version. What do you think? 



(b) (6) 



Esq. 



Policy Advisor 
Office for Civil Rights & Civil Liberties 
Department of H omeland Security 

(o) 

(c) 

This message may contain attorney-client communications or agency deliberative communications, all of which may be privileged 

and not subject to disclosure outside the agency or to the public. Please consult with the Department of Homeland Security, Office 
of General Counsel before disclosing any information contained in this email. 



(b) (6) 
(b) (6) 



(b) (6) 



From: 

Sent: Tuesday, October 25, 2011 1:30 PM 



(b) (6) 



To:[H 

Subject: RE: U/FOUO) Occupy Pittsburgh Threat Assessment (DELIBERATIVE) 




Hi 



(b) (6) 




and took a look at this while you were on vacation last week. You did a great job at laying out the analytic 
framework for considering when its permissible to research and report on 1 st Amendment activity and a great job also at 
analyzing the actual product. However, I am not comfortable with us sending up that level ofdetail on the actual product 
given that the Fusion Center has not sought out assistance, a nd given our role, especially in[0IQl absence, I think it best 
to try and engage them in a softer method, i..e, -by providing [01©] guidance that he can send to them along with our 
offer to open a dial ogue wit h them where we can later provide direct feedback on their product. Attached is what I 
propose we send toLjQHj©! but in the body of an email. Let me know what you think. 



(b) (6) 



Senior Pol icy Advisor 

I intelligence, Security, and I nformation Sharing (I SI S) Section 

Office for Civil Rights & Civil Liberties 

Department of Homeland Security 

Office: 

Blackberry: 

Fax: (202) 357-8341 

emai I : 

J Wl CS: 




(b) (6) 
(b) (6) 



(b) (6) 



From: 

Se nt: Tuesday, October 11, 2011 5:2 3 PM 

To:[£I£^^H;£Ig^^H 

Subject: FW: U/FOUO) Occupy Pittsburgh Threat Assessment (DELIBERATIVE) 




•ill? 



&H2 




Attached please find my first crack at a response to the Pittsburgh threat assessment. Per the way[g^yj has raised this 
issue to us, I'm focusing on general principles (with some digressions on how they would apply to the product in 
question), rather than redlining the actual report. I spoke withjm^^^^^l on Friday and got some additional detail 
about the fusion center in question and how this product came to be that I think will be helpful as you look at what I've 
written. Can we meet briefly tomorrow to discuss? 



(b) (6) 




Esq. 

ucy Advisor 
Office for Civil Rights & Civil Liberties 
Department of H omeland Security 

(o) 

(c) 

This message may contain attorney-client communications or agency deliberative communications, all of which may be privileged 

and not subject to disclosure outside the agency or to the public. Please consult with the Department of Homeland Security, Office 

of General Counsel before disclosing any information contained in this email. 



(b) (6) 
(b) (6) 



(b) (6) 



From: 

Se nt: Friday, Octo ber 07, 2011 10:14 AM 

To: 

Cc: 

Subject: FW: U/FOUO) Occupy Pittsburgh Threat Assessment 




(b) (6) 



As we discussed. 



■ b (6) 



From:[]g|g| | [mailtc 

Se nt: Friday, Octob er 07, 2011 10:07 AM 

To:Qs^|^H 

Subject: U/FOUO) Occupy Pittsburgh Threat Assessment 



(b) (6) 



From: 

Se nt: Friday, October 07, 2011 10:04 AM 

To: 

Cc: 

Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 



(b) (6) 



,(b) (6) 
(b) (6) 



(b) (6) 



I left both of you voice mail messages in which I described this issue in greater detail. 
There is attached to this email a threat bulletin being disseminated by the Office of Emergency Management in Pittsburgh 
in which it discusses the th reat posed by the Occupy Pittsburgh campaign and the hackers' group: Anonymous. Both 
myself and ^^^^^^^H (lO deployed to the PAC1C Center in Harrisburg) are somewhat concerned that several items 
contained in this Intel Bulletin might be advocating surveillance and other countermeasures to be employed against 
activities protected und er the 1 st Amend ment. Would either one or both of you be able to see what could be developed 
from this document that[0K^^^^H could take back to the Intel staff that produced this so that in the future they have a 
greater awareness of how to develop intelligence assessments that don't undermine Constitutionally protected speech and 
assembly rights? 
Thanks in advanced, really appreciate all your help. 



(b) (6) 



From: 

Se nt: Friday, O ctober 07, 2011 9:52 AM 

To:Q2^B 

Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 




1 As discussed. Pittsburgh published and distributed this assessment yesterday. I'm just looking for some help in 
guiding their personnel on what should and shouldn't be said concerning planned, legal demonstrations. Thanks for 
your help. 




(b) (6) 



From:[]g|g| | [mailto: 

Se nt: Thursday, October 06, 2011 3:06 PM 

To: 




Subject: FW: (U/FOUO) Occupy Pittsburgh Threat Assessment 



FYI, 
IS! 




(b) (6) 



Field Intelligence Officer 
Transportation Security Administration 
Western Pennsy lvania and West Virginia 

o 



(b) (6) 
(b) (6) 



(412) 472-8018 f 



(b) (6) 



From: 

Se nt: Thursday, Oct ober 06, 2011 2:51 PM 

Subject: (U/FOUO) Occupy Pittsburgh Threat Assessment 



Attached is a product concerning the Occupy Pittsburgh event planned for October 15, 2011 and Feedback Form. As 
always, your feedback is appreciated. 

Please disseminate as appropriate. 



(b) (6) 



(b) (6) 



(b) (6) 



fc>6 



b 



b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 

Attachments: 



(b) (6) 



(b) (6) 



D 



)( ) 



(b) (6) 



I received a request for input on an FPS product. Can we talk about this tomorrow? I'd like you input as you and I 
collaborated on a similar response that was coordinated with the Privacy Office. 

CC'ing the Product Review Box for recordkeeping purposes. 



(b) (6) 




(b) (6) (b) ( )( ) 



From: ^jf^m^ [mailto: | 

Se nt: Tuesday, Nove mber 01, 2011 2:02 PM 

To:[gagjjj^H 

Subject: Occupy Guidance 

Good afternoon, 

I was advised by Scott Mathews that you are the point person for CRCL regarding the Occupy protests. FPS was notified 
of the guidance to the l&A representatives to restrict production of all Occupy products absent criminal activity and/or 
life safety issues. FPS has followed this guidance and restricted and/or rescinded all products (both internal and pass- 
through). FPS has been asked by GSA to provide a briefing on Occupy at the senior executive level. We are looking for 
additional guidance on the briefing. Would the attached document be acceptable to provide to GSA and other FPS 
stakeholders regarding Occupy or does it need to be limited any further? 

I appreciate any guidance you can offer. 



Thank you, 



(b)(6) b )( ) 



Department of Homeland Security 

Federal Protective Service 

HQ Threat Management Division 




(b)(6) (b)( )( ) 



(F) 202-732-8059 



b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 



(b) (6) 



Wessel, Ann C; 

First Amendment Kignts uuidance 



(b) (6) 



(b) (6) 



All, 

As "Occupy" products continue to be disseminated by various non-DHS parties, we urge you to review the following 
CRCL guidance that they have thoughtfully crafted for our use. If you ever feel you are put in a situation where first 
amendment rights could be potentially violated, please refer to the below guidance, which was created after we 
received a number of questions from around the nation in reaction to the Occupy protests. Also, please feel free to 
share this with analysts who will find this helpful when crafting products for their Fusion Centers. 

Activities such as speech and assembly (both of which are implicated in the planned "occupy" protests) are protected 
by the First Amendment and generally DHS would not collect information or report on these types of activities unless 
we had a compelling interest to do so. Below is some general guidance that we hope you find helpful. 

• The government may never collect or disseminate information based solely on First Amendment protected 
activities, or conduct investigations on that basis. 

• Generally, reporting should be about the violence or criminality of a particular individual or group. Reporting 
on activities without a nexus to violence or criminality often raises First Amendment concerns. 

o To justify research into and creation of a product containing First Amendment-protected activity, 
personnel should consider whether they have a lawful predicate (e.g. a lawful purpose to perform 
their authorized law enforcement functions or other activities, that is not based on the protected 
activity itself). 

o Once a lawful predicate has been established, personnel should ensure the scope of the research and 
reporting on First Amendment-protected activity is limited to the threat posed. This is often referred 
to as congruence. 

• The treatment of groups that may be involved in the First Amendment protected activity or related events 
should be even-handed and free of bias (e.g., not reporting more extensively or negatively on one group 
based on their viewpoint alone). 

Please let us know if you have any other questions, or if you require CRCL support in any other way. The CRCL office has 
been extremely helpful and responsive on this issue and they stand ready to assist. 

Best, 



Shala Byers 



b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 



(b) (6) 



hrida . 



(b) (6) 
(b) (6) 



l-W h 



ember 



ec er, ar ; 



(b) (6) 



(b) (6) 



I received an email from [g|g| at FPS regarding out phone conversation yesterday 
afternoon. He provided the email below for our review and consideration. The drafted email is 
a summary of our conversation and recommended way ahead that he intends to send to senior 
leadership. I have reviewed the email and recommend we concur with his email draft. Please 
advise on whether you agree with my recommendation. 

Thank you. 



(b) (6) 



Office: 
Cell: 



(b) (6) 
(b) (6) 



(b)(6), b C 



Original Message 

From: 

Sent: Friday, November 04, 2011 8:35 AM 

To: 

Subject: FPS 



(b)(6), b C 



Good morning. Thank you for your assistance late yesterday. Below is a message that I have 
drafted and intend to send to my senior leadership regarding what we discussed yesterday. I 
would appreciate you quick review to make sure I am not unfairly characterizing our 
conversation and to make sure I'm leaving out any salient points. 

Thanks, 



(b)(6), b C 



Division Director 

Threat Management Division 

Federal Protective Service 



b 6 , b C 




b (6) 



From: 

Sent: 

To: 

Cc: 

Subject: 



n re le 
nda , ct ber 
ers, hala ; CRC r duct Re ie ; ri re ie 

rt; [EI§|^^F flSBBM BI^^M 

R Guidance fleueslea ecu wall treet 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged in constitutionally 
protected activity. We maintain our longstanding position that DHS should not report on activities when the basis for 
reporting is political speech. We would also be loath to pass DHS requests for more information on the protests along to 
the appropriate fusion centers without strong guidance that the vast majority of activities occurring as part of these 
protests is protected. To do otherwise might give the appearance that DHS is attempting to circumvent existing 
restrictions, policies, and laws. 

To a large degree, these protests are no different from any other protests/events from civil liberties, civil rights and 
privacy perspectives. The issue is not the assembly of the groups nor the message of the participants, it is only (as far as 
DHS is concerned) illegal or suspicious behavior related to a DHS mission that occurs during the protests. A possible 
exception would be reports on the environment created at the protests sites that would endanger public health and safety, 
where the health and safety concern relates to a DHS mission. 

So there are certainly some circumstances that may allow limited reporting on behavior that is coincident and collocated 
with Occupy Wall Street-like protests. Persons demonstrating illegal or suspicious behavior and attempting to use the 
protests to obscure their activity could be reported, as long as there is no attempt to link the suspicious/illegal behavior to 
first amendment protected activity. Indeed, the normal CRCL and PRIV guidance used for HIRs and intelligence products 
would apply, as it is only the behavior which is being addressed. 

It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what type of information 
is being requested, if we were to reconsider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we would be happy 
to start the drafting process. Undoubtedly, drafting formal guidance would require a bit more time to gain the necessary 
clearances. 




J. Scott Mathews, CIPP, Senior Privacy Analyst for Intelligence 
Privac^Qffk^nmartment of Homeland Security 

Tel: ri S)YfS|] H E s m D a ^ : 

HTSN 






(b) (6) 



Policy Advisor 
Office for Civil Rights & Civil Liberties 
Depar tment of Home land Security 
Office: 

Cell: | 

Fax: (202) 357-8298 



(b) (6) 




From: Byers, Shala 

Sent: Monday, October 17, 2011 11:30 AM 

To: CRCL Product Review; Privreview 



(b) (6) 



(b) (6) 



Cc: SL_Support; 

Subject: Guidance Requested: Occupy Wall Street 



All, 

We have received a number of questions and requests for information regarding Occupy Wall Street from a number of 
component partners and intelligence officers. Recognizing that this is a first amendment-protected activity, we have 
recommended (on an ad hoc basis when we received requests) that our Intelligence Officers refer inquiries to Fusion 
Centers and avoid the topic altogether. That being said, given the number of requests that have appeared, we would 
like to equip the field with formal guidance as they will likely continue to receive requests like this from Fusion Center 
partners. We would greatly appreciate formal guidance from CRCL and/or Privacy (whatever you all would prefer to do) 
sooner rather than later to make sure the all in the field are acting in accordance with CRCL and Privacy policies. Thank 
you for your help! 

Also, if you could, please cc SL Support on the response as they are the intake point for requests and it would be helpful 
for them to have this on hand to provide in case someone misses our e-mail. 

Best, 



hala ers 
ntelligence C rdinati n 

tate and cal r gram 
ntelligence and Anal sis 

e artment meland 

ice 

mail 



ranch 
ice 
irect rate 
ecurit 




SENSITIVE SEC 

tease note all times are provided in EDT unless specified otherwise) 

America's Thanksgiving Day Parade (Detroit, MI) - November 24, 2011 - 

Sear Level 3 

Country Club Plaza Christmas Lighting Ceremony (Kansas City, MO) - 

November 24, 2011 - Sear Level 3 

Macy's Thanksgiving Day Parade (NYC, NY) - November 24, 2011 - Sear 

Level 3 

Mall of America Holiday Shopping (Bloomington, MN) - November 25, 

201 1- January 2, 2012 - Sear Level 3 



NICC DAILY SECTOR PULSE REPORT: 

This information is provided as a service of the National Infrastructure Coordinating Center (NICC), Homeland Security 
Operations Center and the Infrastructure Coordination Division (ICD), Information Analysis and Infrastructure Protection 
Directorate of the U.S. Department of Homeland Security (DHS). This report may be distr ibuted or copie d for approved 
Homeland Security purposes. Please address questions/ comments to the NICC by phonel HflWftll I or email 



(b) (6) 



) 



Friday, October 14, 2011 

Public Services 

Emergency Services: Emergency Management 

Alameda County, CA -Alameda County Sheriffs Office, with the support of the Bay 
Area Urban Area Security Initiative, launched a Homeland Security training exercise 
today to test the newest life saving technology for first responders. The exercise known 
as Urban Shield 201 1, incorporates principles of the National Response Framework to 
assist tactical first response teams, both local and international. Participating agencies 
will be able to evaluate their level of preparedness and ability to perform intricate first 
responder operations while training with Law Enforcement, EMS, Fire, and EOD to 
identify their ability to cope with large scale events. Urban Shield 201 1 is designed to 
strengthen each agency's preparedness to respond to threats and domestic terrorist 
attacks, major disasters, and other emergencies. The exercise will conclude on 17 
October. 
Source: Alameda County Urban Shield 

Public Assembly 

Nationwide - As of 14 October, the "Occupy Wall Street" movement continues 
nationwide with protests occurring in the cities of San Diego, New York, Washington 
D.C., Atlanta, Detroit, Denver, and Seattle. Clean-up efforts were postponed today at 
Zucotti Park in Manhattan after demonstrators cleaned the park themselves to prevent 
from being removed. The protest campaign began last July with the launch of a campaign 
website calling for a march and a sit-in at the New York Stock Exchange. 
Source: CNN 



WARNING: This record contains Sensitive Security Information that is controlled under 49 CFR parts 15 and 152 0. No 
part of this record may be disclosed to persons without a "need to know", as define d in 49 CFR pnrtn 1^ .mil 1 3 'II except 

with the written permission of the 4dnTinistratoroftheT£anspog< rtkm Security AHminigtratinn r the Secretary of 
Transportation. T T nnuthori^rd rrlrn n mi > I'nult in mil prnnlty or other action. For U.S. government agencies, public 

disclosure is governed by 5 U.S.C. 552 and 49 CFR parts 15 and 1520. 
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(b)(6), b )(C), (b)( )( ) 



From: 

Sent: 

To: 

Subject; 



b c , b )( ) 



NOC Media Monitoring| 

Thursday, October 27, 2011 5:53 PM 

Undisclosed recipients 

Anonymous Threatens To Hack Fox News Over Occupy Wall Street Coverage-MMC 101 # 
5969-11 



Location: Global 

Anonymous, a group of hackers thai has previously attacked Sony and Bay Area Rapid Transit, said it will shut 
down the Fox News website on November 5. The group announced its intentions in a video on YouTube, citing 
Fox News' propaganda against the Occupy Wall Street movement as a reason. 

"Anonymous introduces Occupation Fox Hunt," the video's disembodied voice said. "It intends on destroying 
the Fox News website because their continued right-wing conservative propaganda can no longer be tolerated." 

The group, which is affiliated with fellow hacker group LulzSec, specifically mentions a primetime host for 
attacking the "character and credentials" of the occupiers. 

A spokesperson for Fox News said that they pay a great deal of attention to security every day. Though 
precautionary measures will be taken, this is no different from an average day. 

Traditional Media Sources (some page content may change or not be available over time): 

- Reuters 

- http://www.rcutcrs.com/aiticle/201 l/I0/27/us-fox-hackerS'idUSTRE79Of?L52Ql 1 1027 



(b)(6), (b)( )(C) 



Operations Analyst 

DHS N OC Media Mo nitoring 

Phone 

Cell: 



(b)(6), (b)( )(C) 
(b)(6), (b)( )(C)| 
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From: 

Sent: 

Subject: 




Battle Creek Megacenter 
Sunday, October 30, 201 1 5:24 PM 
Demonstration:Peaceful/Unplanned-Spot Report-Region 6-1 1B03401 1 



Spot Report 11B034011 
Battle Creek Megacenter 
Event ID 11034011 
Ooerator 365 



(b)(6), (b)( (C)i 



•i 



ration is taking place in Ilus W. 



1. Crime/Incident: 

Demonstration : Peaceful/Unplanned 

2* Summary: 

PSOJIHIIiHI advised that an "Occupy Hall Street 

Davis Park, across from 901 E. Locust Street. 

Approximately 300 people are currently participating, FPS Inspectors are on site and 

monitoring the s ituatio n (Insp^^ISfflBIBSl ^ ns P- 

g^^g^^g l nS p . Iljjjllll i r - , p >jglgng«Kaj, status: Open, pending further actions. 

3. Date/Time of Incident: 

10/30/2011 @ 13:42 

4, City/State: 
Kansas City, MO 

5_ Point of Contact: 



PSO 

Not 
7. 

Not 
8. 



(b)(6), b C 



Case Control Number: 
Yet Issued 

Incident Activity Code: 
Vet Issued 
Building Name: 
Dept of Transportation 

9. Address: 

901 Locust Street 

10. Agent/Officer Assigned: 
Not Yet Assigned 

11. Prepared By: 
Operator 163 



(b)(6), b C 



12. Megacenter Notification: 
10/30/2011 @ 16:33 Eastern 

13. Authorized By: 

SOP 

14. Transmitted: 
10/30/2011 @ 17:06 Eastern 

15. Spot Report #: 
11B034011 

Battle Creek MegaCenter 

877-4FPS-411 

Direct: 



(b) (6) 



(b) (6) 



PROPERTY OF THE UNITED STATES GOVCRMMCNT TOR 0(TKIAL USE ONLY (rOUO) 

1 



Protect it from unauthorized disclosure in compliance with applicable orders 3 statutes , and 
regulations. DHS 11042-1 (03/05) 

This message (including any attachments) may contain confidential and or law enforcement 
sensitive (LE5) information intended for a specific individual and purpose, and should be 
considered for official use only. 
(FOUO) DHS 11042.1 (03/05) 



Homeland 
Security 


Support Requ 






f-4 ATD S^ 



WARNING: To be assessed suitable for support, (1) the request must be made in furtherance of a lawful governmental function, and (2) reasonable belief 1 must 
exist that the request relates to an actual or potential terrorist or Homeland security threat 2 

1 A reasonable belief arises when the facts and circumstances are such that a reasonable person would hold the belief. Reasonable belief must rest on facts 
and circumstances that can be articulated; "hunches" or intuitions are not sufficient Reasonable belief may be based upon experience, training, and 
knowledge in intelligence or a related field, applied to the facts and circumstances at hand. 

2 Threats to Homeland Security include all threats or hazards, regardless of origin, that relate to critical infrastructure or key resources; a significant public 
safety, public health, or environmental impact; economic, political, and societal infrastructure; border security; proliferation or use of weapons of mass 
destruction; or other potential catastrophic events, including man-made and natural disasters. 



1. REQUESTOR INFORMATION 



a. Name: TobyCoates 


b. Agency/Organization: LA Fusion Center 






c. Contact Information: Primary Telephone Number: 


(b) (6) 


Alternate Telephone Number: 




Primary Email Address: 


(b) (6) ^^^^^^^^^H 


Alternate Email Address: 





2. REQUEST DESCRIPTION 



a. Identify the specific information (or support) being requested. 

Any DHS products identifying and/or describing criminal activities and/or potential civil disobedience associated with the 

Occupy Wall Street protests nationwide. 

How many arrests have been made, type and number of weapons confiscated, communication used to plan these crimes, 

etc? 



b. What date is the information/support needed by and what is the last date the information/support will be of any value? 
Elaborate on anytime-sensitive requests. Additional justification is required for responses needed within 24 hours. 
Desired Response Date: 10/21/2011 
No Longer of Value Date: 



UNCLASS I HhD// h OK OmC I AL USE ON L Y - 



DHS Form #10058 (06-10) 



3. INTELLIGENCE AND LAW ENFORCEMENT INFORMATION REQUESTS 



a. Does your request contain U.S. Person (USPER) information? NO 

b. Does your request contain Law Enforcement Sensitive (LES) information? YES 

c. Who are the intended recipients of the information being requested (please list specific agencies/organizations)? 

A federal partner of the Fusion Center at LA. 



d. Identify the specific resources (to include database names, analytical exchanges, message searches, and local 
outreach efforts) already researched or queried. 




e. To assist in the identification of potential resources, please provide some background information (i.e. context) as to 
why this request is being submitted to Headquarters DHS for action. 

To share with a federal partner of the Fusion Center at LA. 



f. What is the desired level of classification (including caveats)? 
Unclassified 

g. What is the highest acceptable level of classification (including caveats) the response can be at? 

Unclassified//LES 




DHS Form #10058 (06-10) 



' UNCLASS I F IED //FOR OmC I AL UGC ONLY 



4. DECLASSIFICATION/DOWNGRADE/TEARLINE/ADDITIONAL DISSEMINATION REQUESTS 



a. What is the (1) name of the source document/report, (2) the associated reference number of the source 
document/report, and (3) the producer of the source document/report? 




b. Where was this information originally obtained (i.e. how did you discover the information was available)? 




c. What specific information within the source document should be declassified, downgraded, or authorized for 
additional dissemination? 




State, Local, Tribal, and Territorial Customers 

SUBMIT UNCLASSIFIED FORM 



IC, DHS Component or Federal Customers 

SUBMIT UNCLASSIFIED FORM 




DHS Form #10058 (06-10) 



5. INTERNAL USE ONLY- DHS SPS ACTIONS TAKEN 



SLSR-0022-12 
20111017 

[Berry] 1. After reviewing the nature and scope of this request, we have determined this request does not fall within the 
scope of l&A mission and authorities based on the validation criteria described below. 

[Berry] 2. The following validation actions were taken by the l&A Support Branch: 

a. Contacted, and coordinated through both the SLPO and spoke to the requestor over the phone. It was deemed that the 

request was not within the authorities of l&A and the request was closed. 

[Berry] 3. AUTHORITIES: The requested information does not fall within the scope of l&A's below authorities: 

a. The information being requested does not fall within the scope of l&A's authorities. Arrests being made at these protests 

are a criminal matter and the protesters are engaged in constitutionally protected activity. 

[Berry] 4. POTENTIAL VIOLATIONS 

a. This requested information does violate existing policies governing information sharing or the dissemination of controlled 

information. DHS should not report on activities where the basis for reporting is political speech. 

[Berry] 5. USPER: This request does not contain U.S. Persons information. 

[Berry] 6. Regional Analytic Advisor Plan (RAAP) Coordination: The RAAP (cc'd) for the request is: 
N/A 




DHS Form #10058 (06-10) 



DHS Support Request Form Instructions 

DHS Form #10058 (04-10) 

Proper completion of this form will enhance the timelines of your response. 

Classification of the overall document should be displayed on the header and footer of the submission form. 

Proper CAPCO portion markings are to be incorporated into each section. 

Attach any source documents relating to the request to the email sent to SPS. 



v 



1. REQUESTOR INFORMATION 

a. This section describes the person requesting the information. Annotate the individual that SPS can contact when a response is received from the action agency. 

b. This section describes the entity submitting the request. List the Agency, Office, and, if applicable, branch requesting the information. 

2. REQUEST DESCRIPTION 

a. This section describes what is being requested. A detailed description of the precise information requested must be provided. This will ensure your request is answered 
as accurately as possible by the organization most capable of responding. Assume that the responding organization is unfamiliar with the nature and scope when 
detailing the request. If your request is for imagery please include dates and coordinates (available from Google Earth) or at a minimum, dates and place names, with the 
request. 

b. This section describes the desired response date and the date in which the information is no longer of value. It is important to note that DHS does not have tasking 
authority with outside organizations or DHS Components to respond to a request. Requests involving multiple agencies will require additional coordination time. The 
minimum processing time for requests to Intelligence Community members is typically 15 to 20 working days. 

c. This section annotates additional justification for requests with a suspense date of one business day. It is important to note that requests processed by the Intelligence 
Community within 2 to 4 hours require justification involving an imminent and identifiable threat. Requests processed by the Intelligence Community within 8 to 24 hours 
require a justification with critical actionable information. 

3. INTELLIGENCE AND LAW ENFORCEMENT INFORMATION REQUESTS 

a. Select YES from the dropdown menu if the request contains USPER information. 

This information is required to ensure the request is properly handled and stored in accordance with Executive Order 12333. 

b. Select YES from the dropdown menu if the request contains LES information. 

This information is required as LES information requires a request to the originator prior to additional dissemination. 

c. This section describes the proposed use of the requested information as well as why the information is of value to the intended recipient(s). When detailing the 
proposed use, it is important to be as specific as possible when identifying the intended recipients of the information. If possible; list the division(s), branch(s), or 
individual(s) intended to receive the information. This is extremely important when releasing UNCLASSIFIED/LES/SBU/FOUO information, especially if the possibility 
exists that the information may be released to the general public. 

d. This section identifies the actions taken by the requester prior to submitting a request for information. Requestors are responsible for determining whether the request 
can be supported or completed at their level prior to submitting a request to query DHS systems, databases, and programs. The identification of prior research and 
database queries (to include database searches, analytical exchanges, message searches, and local outreach efforts) is crucial to prevent a duplication of effort. If 
circumstances limit access to DHS systems or databases, please annotate this here. For IC members, please state the larger Intelligence Problem being researched. If 
applicable, provide the originator, the reference number, and subject of the source document(s) related to this request. 

e. This section describes the justification of the request. Outside organizations prioritize requests based in the justification provided. In order to enable requirements and 
collection managers to develop a detailed response plan, requestors must clearly state the context associated with the request. Taking the time and effort to explain the 
context not only enables requirements and collection managers to understand the "larger picture," but it also ensures all possible resources are considered. 

f. This section will determine what information can be released by the requested organization. The ability of an organization to release information at a specific 
classification level is contingent upon the sources and methods used to gather the requested information. 

g. This section will determine if the information can be provided at a classification (to include caveats) that is useful to the requester. If an organization cannot downgrade 
the requested information to this level, the requester will receive a negative response. 

4. DECLASSIFICATION/DOWNGRADE/TEARLINE/ADDITIONAL DISSEMINATION REQUESTS 

* The below sections are only applicable to requests for downgrading the original classification or control marking(s) of a document. 

a. This section identifies the document to be downgraded. Provide all available identifying information of the report. Include, if available, the originator, the reference 
number, and subject of the document to be downgraded. When submitting a downgrade/tearline request, it is important to distinguish raw intelligence (such as an IIR or 
HIR) from a finished intelligence product (such as an intelligence assessment or intelligence summary), especially if the request is to have a source document (i.e. IIR) 
within a finished intelligence product downgraded. All downgrade/tearline requests will be forwarded to the producing agency, where a decision will be made as to 
whether the information can be downgraded. 

b. Identify how the information or intelligence product was obtained. Given the proliferation of information sharing systems, organizations responding to a 
downgrade/tearline request must be able to access the document in its original location. 

c. To prevent unnecessary delays, provide a summary of the information extracted from the original source document. Requests to have entire documents or products 
declassified are much less likely to be approved and will take significantly longer to process than a specific request for a line or paragraph. Mark the paragraphs with the 
requested classification and control marking. 
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From: 

Sent: 

To: 

Cc: 

Subject: 



Byers, Shala 

Monday, October 17, 2011 11:30 AM 

CRCL Product Review; Privreview 

Guidance Requested: Occupy Wall Street 



Follow Up Flag: 
Flag Status: 



Follow up 
Completed 



Categories: 



Scott primary 



All, 

We have received a number of questions and requests for information regarding Occupy Wall Street 
from a number of component partners and intelligence officers. Recognizing that this is a first 
amendment-protected activity, we have recommended (on an ad hoc basis when we received requests) 
that our Intelligence Officers refer inquiries to Fusion Centers and avoid the topic altogether. That being 
said, given the number of requests that have appeared, we would like to equip the field with formal 
guidance as they will likely continue to receive requests like this from Fusion Center partners. We would 
greatly appreciate formal guidance from CRCL and/or Privacy (whatever you all would prefer to do) 
sooner rather than later to make sure the all in the field are acting in accordance with CRCL and Privacy 
policies. Thank you for your help! 

Also, if you could, please cc SL Support on the response as they are the intake point for requests and it 
would be helpful for them to have this on hand to provide in case someone misses our e-mail. 

Best, 



hala ers 
ntelligence C rdinati n 

tate and cal r gram 
ntelligence and Anal sis 

e artment meland 



ranch 
ice 
irect rate 
ecurit 



From: Coates, Toby 

Sent: Monday, October 17, 2011 10:45 AM 

To: SL_Support 

Cc: SL_Field 

Subject: Intelligence Products 

A federal partner has submitted a RFI on any DHS products identifying and/or describing criminal 
activities and/or potential civil disobedience associated with the Occupy Wall Street protests 
nationwide, if any. 

How many arrests have been made, type and number of weapons confiscated, communication used 
to plan these crimes, etc. 

The response is requested at the U//LES level by Friday 21, 2011. 
Respectfully, 

Toby Coates 

Office of Intelligence & Analysis 
U.S. Department of Homeland Security 
Baton Rouge, LA 



Sent using Verizon BlackBerry 
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From: 
Sent: 
To: 
Subject: 



Robinson, Charles 

Wednesday, November 02, 2011 4:16 PM 

Mathews, Scott 

RE: MR Advisory group meeting documents 



Follow Up Flag: 
Flag Status: 



Follow up 
Completed 



Categories: 



Intel Review 



Scott, 

Shala works for Ron Athman and Anne Wessel. Both are great people and would love to hear the kudos 

on Shala. 

Chuck 

Charles B. Robinson 

e ut irect r 
C llecti n Re uirements i isi n (CR ) 
ice ntelligence Anal sis ( A) 
e artment meland ecurit 




From: Mathews, Scott 

Sent: Wednesday, November 02, 2011 3:30 PM 

To: Robinson, Charles 

Subject: RE: MR Advisory group meeting documents 

The person I mentioned from SLPO who brought up the issue of "Occupy Wall Street" and handled it so 
well is Shala Byers (Intelligence Coordination Branch, State and Local Program Office). She has been 
great to work with overall, but on this issue in particular she did a great job. 



Scott 




m iviamews, uirr, oernor rnvauy Mnaiysi lor iruemyerice 

: v Office, Departm ent of H omeland Security 

■ nasi 



From: Robinson, Charles 

Sent: Wednesday, November 02, 2011 2:33 PM 

To: Mathews, Scott 

Subject: RE: MR Advisory group meeting documents 



Scott 

Just added you to the distro for the MR AG. 



Chuck 

Charles B. Robinson 

e ut irect r 
C llecti n Re uirements i isi n (CR ) 
ice intelligence Anal sis ( A) 
e artment meland ecurit 




From: Mathews, Scott 

Sent: Wednesday, November 02, 2011 10:35 AM 

To: Robinson, Charles 

Subject: MR Advisory group meeting documents 

I contacted the POC for the meeting, but she suggested I contact you directly. I have not received the 
documents intended for discussion today. Were they sent out on C-LAN. I commented on an earlier draft 
of the CONOPS, but without the final draft in hand it is difficult to evaluate the final draft CONOPS and 
other documents. 

I have replaced Ken Hunt as representing Mary Ellen or this and future IIR Advisory Group meetings. 

Scott 




J. Scott Mathews, CIPP, Senior Privacy Analyst for Intelligence 
Priva cy Office, Departm ent of Homeland Security 

Tel MSlWra] Email , 

BB: L12|M|S|J HSDNI 
PagelHHHI HTSN 




From: Athmann, Ronald 

Sent: Tuesday, November 08, 2011 9:42 AM 

To: Mathews, Scott 

Cc: Button, Christopher; Athmann, Ronald; Wessel, Ann C 

Subject: RE: Work well done 

Follow Up Flag: Follow up 

Flag Status: Completed 

Categories: Intel Review 

c tt than u r ta ing the time t r ide us such siti e eedbac n ur interacti ns ith 
hala Als , e trul a reciate ur e rts t c rdinate s luti ns ith the s e can intl ee 

ur Regi nal irect rs and ntelligence icers in rmed n a r riate acti ns during sensiti e 
situati ns his e am le c rdinati n and c Nab rati ninatimel manner bet een ur ices and the 
ield is a siti e i e are as ed h e handled the ecu scenari s han s r ur artnershi 
and the siti e eedbac n halase em lar er rmance 

R n 



From: Mathews, Scott 
Sent: Tuesday, November 08, 2011 9:32 AM 
To: Athmann, Ronald; Wessel, Ann C 
Subject: Work well done 

Mr. Athmann and Ms. Wessel: 

I would like to commend to you the work of Shala Byers in coordinating and expediting intelligence 
products. 

I have been responsible for the Privacy Office's intelligence review activities for almost a year now, so I 
have had a little bit of time to work with different I&A staff in the oversight and clearance process. 
During this time I often noted how smoothly the process worked with Shala' s involvement. Shala is quick 
to follow-up and (most importantly) follow-through with Privacy's comments and requests, coordinating 
solutions with the various participants in the process. 

Most recently, Shala brought to Privacy and CRCL's attention some incoming requests for information 
regarding the ongoing Occupy Wall Street-type protests. She recognized the potential hazards and 
brought the requests to our attention at a very early stage. Upon Shala' s request, Privacy and CRCL 
quickly drafted and coordinated guidance which was apparently disseminated shortly thereafter. As a 
result of the guidance, other components have reached out to Privacy and CRCL to better understand 
upon what to report concerning the protests. 

I believe this was an excellent example of a coordinated effort by the offices involved to identify a 
potential problem, and takes steps to keep the problem from developing. I understand we have already 
received some FOIA requests regarding our possible reporting of the "Occupy. . ." protests. I think should 
the FOIA experts find it appropriate to release information about the manner in which this issue was 



managed within DHS, it could only be perceived as a positive by those in the public who closely observer 
the Department.. 

Scott 




J. Scott Mathews, CIPP, Senior Privacy Analyst for Intelligence 
Priv acy Office, U.S. Department of Homeland Security 

Tel MSiWffitl Fax: ( 703) 235-0442 

BE im^UIJ E-mail [(2IQ^^^^^^^H 

This email is covered by federal and state law governing electronic communications and may contain 
confidential and legally privileged information. If the reader of this message is not the intended recipient, 
you are hereby notified that any dissemination, distribution, use or copying of this message is strictly 
prohibited. If you have received this in error, please reply immediately to the sender and delete this 
message. Thank you. 



From: Mathews, Scott 

Sent: Tuesday, November 08, 2011 9:32 AM 

To: Athmann, Ronald; Wessel, Ann C 

Subject: Work well done 

Follow Up Flag: Follow up 

Flag Status: Completed 

Categories: Intel Review 

Mr. Athmann and Ms. Wessel: 

I would like to commend to you the work of Shala Byers in coordinating and expediting intelligence 
products. 

I have been responsible for the Privacy Office's intelligence review activities for almost a year now, so I 
have had a little bit of time to work with different I&A staff in the oversight and clearance process. 
During this time I often noted how smoothly the process worked with Shala' s involvement. Shala is quick 
to follow-up and (most importantly) follow-through with Privacy's comments and requests, coordinating 
solutions with the various participants in the process. 

Most recently, Shala brought to Privacy and CRCL's attention some incoming requests for information 
regarding the ongoing Occupy Wall Street-type protests. She recognized the potential hazards and 
brought the requests to our attention at a very early stage. Upon Shala' s request, Privacy and CRCL 
quickly drafted and coordinated guidance which was apparently disseminated shortly thereafter. As a 
result of the guidance, other components have reached out to Privacy and CRCL to better understand 
upon what to report concerning the protests. 

I believe this was an excellent example of a coordinated effort by the offices involved to identify a 
potential problem, and takes steps to keep the problem from developing. I understand we have already 
received some FOIA requests regarding our possible reporting of the "Occupy. . ." protests. I think should 
the FOIA experts find it appropriate to release information about the manner in which this issue was 
managed within DHS, it could only be perceived as a positive by those in the public who closely observer 
the Department.. 



Scott 




J. Scott Mathews, CIPP, Senior Privacy Analyst for Intelligence 
Priv acy Office. U.S. Department of Homeland Security 

Tel N51Wf2ra Fax: ( 703) 235-0442 
IT II ISIMISII E-mail 




This email is covered by federal and state law governing electronic communications and may contain 
confidential and legally privileged information. If the reader of this message is not the intended recipient, 
you are hereby notified that any dissemination, distribution, use or copying of this message is strictly 
prohibited. If you have received this in error, please reply immediately to the sender and delete this 
message. Thank you. 



From: 
Sent: 
To: 
Subject: 



Privreview 

Monday, October 17, 2011 12:37 PM 



(b) (6) 



RE: Guidance Requested: Occupy Wall Street 



Follow Up Flag: 
Flag Status: 



Follow up 
Completed 



Categories: 



Intel Review 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged 
protected activity. We would also be loath to pass requests for more information on the protests along to 
the appropriate fusion centers without strong guidance that the vast majority of activities occurring as part 
of these protests is protected. To do otherwise might give the appearance that DHS is attempting to 
circumvent existing restrictions, policies, and laws. 

To a large degree, these protests are no different from any other protests/events from civil liberties, civil 
rights and privacy perspectives. The issue is not the assembly of the groups nor the message of the 
participants, it is only (as far as DHS is concerned) illegal or suspicious behavior related to a DHS 
mission that occurs during the protests. A possible exception would be reports on the environment created 
at the protests sites that would endanger public health and safety. 

So there are certainly some circumstances that may allow limited reporting on behavior that is coincident 
and collocated with "Occupy Wall Street" like protests. Persons demonstrating illegal or suspicious 
behavior and attempting to use the protests to obscure their activity could be reported, as long as there is 
no attempt to link the suspicious/illegal behavior to first amendment protected activity. Indeed, the normal 
CRCL and PRIV guidance used for HIRs and products would apply, as it is only the behavior which is 
being addressed. 

It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what 
type of information is being requested, if we were to consider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we 
would be happy to start the drafting process. Inevitably, drafting formal guidance would require a bit 
more time to gain the necessary clearances. 




J. Scott Mathews, CIPP, Senior Privacy Analyst for Intelligence 
Privac y Office, Departme nt of H omeland Security 

Tei nnwffli 

bb: L|2|M|S|Jhsdn 

Page: IHSHIhTSN: 




From: Byers, Shala 

Sent: Monday, October 17, 2011 11:30 AM 

To: CRCL Produ ct Review; Privreview 

Cc: SL_Support; (JSfiS^H ^^E3I©^^ft 
Subject: Guidance Requested: Occupy Wall Street 



All, 



We have received a number of questions and requests for information regarding Occupy Wall Street 
from a number of component partners and intelligence officers. Recognizing that this is a first 
amendment-protected activity, we have recommended (on an ad hoc basis when we received requests) 
that our Intelligence Officers refer inquiries to Fusion Centers and avoid the topic altogether. That being 
said, given the number of requests that have appeared, we would like to equip the field with formal 
guidance as they will likely continue to receive requests like this from Fusion Center partners. We would 
greatly appreciate formal guidance from CRCL and/or Privacy (whatever you all would prefer to do) 
sooner rather than later to make sure the all in the field are acting in accordance with CRCL and Privacy 
policies. Thank you for your help! 

Also, if you could, please cc SL Support on the response as they are the intake point for requests and it 
would be helpful for them to have this on hand to provide in case someone misses our e-mail. 

Best, 

Shala Byers 

Intelligence Coordination Branch 

State and ocal Program Office 

Intelligence and Analysis Directorate 

Department of Homeland Security 

Office: 

E-mail: 




From: 

Sent: 

To: 

Cc: 

Subject: 



(b) (6) 



Monday, October 17, 2011 2:51 PM 
Privreview 



(b) (6) 



RE: Guidance Requested: Occupy Wall Street 



Follow Up Flag: 
Flag Status: 



Follow up 
Completed 



Categories: 



Scott primary 



Scott, this looks great. Thank you for putting this well-written response together. We fully support this 
position. I've added a few extra nuggets for your consideration. I've used bold and underline to 
annotate the proposed changes. If you agree with this, please feel free to send forward. I've added my 
signature block to show my agreement. 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged 
constitutionally protected activity. We maintain our longstanding position that DHS should not 
report on activities when the basis for reporting is political speech. We would also be loath to pass 
DHS requests for more information on the protests along to the appropriate fusion centers without strong 
guidance that the vast majority of activities occurring as part of these protests is protected. To do 
otherwise might give the appearance that DHS is attempting to circumvent existing restrictions, policies, 
and laws. 

To a large degree, these protests are no different from any other protests/events from civil liberties, civil 
rights and privacy perspectives. The issue is not the assembly of the groups nor the message of the 
participants, it is only (as far as DHS is concerned) illegal or suspicious behavior related to a DHS 
mission that occurs during the protests. A possible exception would be reports on the environment created 
at the protests sites that would endanger public health and safety , where the health and safety concern 
relates to the DHS mission . 

So there are certainly some circumstances that may allow limited reporting on behavior that is coincident 
and collocated with "Occupy Wall Street" like protests. Persons demonstrating illegal or suspicious 
behavior and attempting to use the protests to obscure their activity could be reported, as long as there is 
no attempt to link the suspicious/illegal behavior to first amendment protected activity. Indeed, the normal 
CRCL and PRIV guidance used for HIRs and intelligence products would apply, as it is only the 
behavior which is being addressed. 

It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what 
type of information is being requested, if we were to reconsider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we 
would be happy to start the drafting process. Inevitably, drafting formal guidance would require a bit 
more time to gain the necessary clearances. 




J. Scott Mathews, CIPP, Senior Privacy Analyst for Intelligence 






ent of Homeland Securit 
Email: 
HSDN 
HTSN: 
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Pol icy Advisor 

Office for Civil Rights & Civil Liberties 

Department of H omeland Security 

Office: 

Cell 

Fax: (202) 357-8298 




(b) (6) 



From: Byers, Shala 

Sent: Monday, October 17, 2011 11:30 AM 

To: CRCL Produ ct Review; Privreview 

Cc: SL_Support;[©I©^^|^^E3I©^^V 
Subject: Guidance Requested: Occupy Wall Street 



All, 

We have received a number of questions and requests for information regarding Occupy Wall Street 
from a number of component partners and intelligence officers. Recognizing that this is a first 
amendment-protected activity, we have recommended (on an ad hoc basis when we received requests) 
that our Intelligence Officers refer inquiries to Fusion Centers and avoid the topic altogether. That being 
said, given the number of requests that have appeared, we would like to equip the field with formal 
guidance as they will likely continue to receive requests like this from Fusion Center partners. We would 
greatly appreciate formal guidance from CRCL and/or Privacy (whatever you all would prefer to do) 
sooner rather than later to make sure the all in the field are acting in accordance with CRCL and Privacy 
policies. Thank you for your help! 

Also, if you could, please cc SL Support on the response as they are the intake point for requests and it 
would be helpful for them to have this on hand to provide in case someone misses our e-mail. 

Best, 



Shala Byers 

Intelligence Coordination Branch 

State and ocal Program Office 

Intelligence and Analysis Directorate 

Depart ment of Homeland Security 

Office: 

E-mail 




From: 

Sent: 

To: 

Cc: 

Subject: 



Privreview 

Monday, October 17, 2011 4:02 PM 

Byers, Shala; CRCL Product Review; Privreview 

SL_Support;[J2JJ»j^^H^^K3H2^^B) 
RE: Guidance Requested: Occupy Wall Street 



Follow Up Flag: 
Flag Status: 



Follow up 
Completed 



Categories: 



Scott primary 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged in 
constitutionally protected activity. We maintain our longstanding position that DHS should not report on 
activities when the basis for reporting is political speech. We would also be loath to pass DHS requests 
for more information on the protests along to the appropriate fusion centers without strong guidance that 
the vast majority of activities occurring as part of these protests is protected. To do otherwise might give 
the appearance that DHS is attempting to circumvent existing restrictions, policies, and laws. 

To a large degree, these protests are no different from any other protests/events from civil liberties, civil 
rights and privacy perspectives. The issue is not the assembly of the groups nor the message of the 
participants, it is only (as far as DHS is concerned) illegal or suspicious behavior related to a DHS 
mission that occurs during the protests. A possible exception would be reports on the environment created 
at the protests sites that would endanger public health and safety, where the health and safety concern 
relates to a DHS mission. 

So there are certainly some circumstances that may allow limited reporting on behavior that is coincident 
and collocated with Occupy Wall Street-like protests. Persons demonstrating illegal or suspicious 
behavior and attempting to use the protests to obscure their activity could be reported, as long as there is 
no attempt to link the suspicious/illegal behavior to first amendment protected activity. Indeed, the normal 
CRCL and PRIV guidance used for HIRs and intelligence products would apply, as it is only the behavior 
which is being addressed. 

It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what 
type of information is being requested, if we were to reconsider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we 
would be happy to start the drafting process. Undoubtedly, drafting formal guidance would require a bit 
more time to gain the necessary clearances. 




J. Scott Mathews, CIPP, Senior Privacy Analyst for Intelligence 
Privacy Office, Department of Homeland Security 
Tel: Email: 

HSDN 

HTSN 
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From: Byers, Shala 

Sent: Monday, October 17, 2011 11:30 AM 

To: CRCL Product Review; Privreview 

Cc: SL_Support; 

Subject: Guidance Requested: Occupy Wall Street 



(b) (6) 



All, 

We have received a number of questions and requests for information regarding Occupy Wall Street 
from a number of component partners and intelligence officers. Recognizing that this is a first 
amendment-protected activity, we have recommended (on an ad hoc basis when we received requests) 
that our Intelligence Officers refer inquiries to Fusion Centers and avoid the topic altogether. That being 
said, given the number of requests that have appeared, we would like to equip the field with formal 
guidance as they will likely continue to receive requests like this from Fusion Center partners. We would 
greatly appreciate formal guidance from CRCL and/or Privacy (whatever you all would prefer to do) 
sooner rather than later to make sure the all in the field are acting in accordance with CRCL and Privacy 
policies. Thank you for your help! 

Also, if you could, please cc SL Support on the response as they are the intake point for requests and it 
would be helpful for them to have this on hand to provide in case someone misses our e-mail. 

Best, 



Shala Byers 

Intelligence Coordination Branch 

State and ocal Program Office 

Intelligence and Analysis Directorate 

Department of Homeland Security 

Office: 

E-mail:! 




From: 

Sent: 

To: 

Cc: 

Subject: 



Privreview 

Monday, October 17, 2011 4:02 PM 

Byers, Shala; CRCL Product Review; Privreview 

RE: Guidance Requested: Occupy Wall Street 



Follow Up Flag: 
Flag Status: 



Follow up 
Completed 



Categories: 



Intel Review 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged in 
constitutionally protected activity. We maintain our longstanding position that DHS should not report on 
activities when the basis for reporting is political speech. We would also be loath to pass DHS requests 
for more information on the protests along to the appropriate fusion centers without strong guidance that 
the vast majority of activities occurring as part of these protests is protected. To do otherwise might give 
the appearance that DHS is attempting to circumvent existing restrictions, policies, and laws. 

To a large degree, these protests are no different from any other protests/events from civil liberties, civil 
rights and privacy perspectives. The issue is not the assembly of the groups nor the message of the 
participants, it is only (as far as DHS is concerned) illegal or suspicious behavior related to a DHS 
mission that occurs during the protests. A possible exception would be reports on the environment created 
at the protests sites that would endanger public health and safety, where the health and safety concern 
relates to a DHS mission. 

So there are certainly some circumstances that may allow limited reporting on behavior that is coincident 
and collocated with Occupy Wall Street-like protests. Persons demonstrating illegal or suspicious 
behavior and attempting to use the protests to obscure their activity could be reported, as long as there is 
no attempt to link the suspicious/illegal behavior to first amendment protected activity. Indeed, the normal 
CRCL and PRIV guidance used for HIRs and intelligence products would apply, as it is only the behavior 
which is being addressed. 

It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what 
type of information is being requested, if we were to reconsider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we 
would be happy to start the drafting process. Undoubtedly, drafting formal guidance would require a bit 
more time to gain the necessary clearances. 




J. Scott Mathews, CIPP, Senior Privacy Analyst for Intelligence 
Privacy Office, Department of Homeland Security 
Tel: IPVWTJSI Email: 
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From: Byers, Shala 

Sent: Monday, October 17, 2011 11:30 AM 

To: CRCL Produ ct Review; Privreview 

Cc: SL_ Support; ^^^H5H3^^^M CTR) 
Subject: Guidance Requested: Occupy Wall Street 



All, 

We have received a number of questions and requests for information regarding Occupy Wall Street 
from a number of component partners and intelligence officers. Recognizing that this is a first 
amendment-protected activity, we have recommended (on an ad hoc basis when we received requests) 
that our Intelligence Officers refer inquiries to Fusion Centers and avoid the topic altogether. That being 
said, given the number of requests that have appeared, we would like to equip the field with formal 
guidance as they will likely continue to receive requests like this from Fusion Center partners. We would 
greatly appreciate formal guidance from CRCL and/or Privacy (whatever you all would prefer to do) 
sooner rather than later to make sure the all in the field are acting in accordance with CRCL and Privacy 
policies. Thank you for your help! 

Also, if you could, please cc SL Support on the response as they are the intake point for requests and it 
would be helpful for them to have this on hand to provide in case someone misses our e-mail. 

Best, 



Shala Byers 

Intelligence Coordination Branch 

State and ocal Program Office 

Intelligence and Analysis Directorate 

Department of Homeland Security 

Office I 

E-rmai 




From: 

Sent: 

To: 

Cc: 

Subject: 



Byers, Shala 

Monday, October 17, 2011 5:28 PM 

Privreview; CRCL Product Review 

RE: Guidance Requested: Occupy Wall Street 



Follow Up Flag: 
Flag Status: 



Follow up 
Completed 



Categories: 



Scott primary 



Scott, 

Many thanks for the thoughtful and detailed guidance. We appreciate you taking the time to present 
Privacy's perspective on the myriad possibilities and outcomes posed by RFIs relating to this topic. 

SL Support, 

Would you mind sending them a compilation of the requests you have received regarding this topic? If 
that isn't possible I can cull through what has come in from our various IOs when I get back on Monday. 
Per Scott, I believe that context would be helpful for both Privacy and CRCL colleagues alike as I imagine 
we will continue to receive inquiries. 

Best, 

Shala 



From: Privreview 

Sent: Monday, October 17, 2011 4:02 PM 

To: Byers, Shala ; CRCL Product Review; Privrev iew 

Cc: SL_Support; ^^^^^^^E^^^^^^l* 
Subject: RE: Guidance Requested: Occupy Wall Street 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged in 
constitutionally protected activity. We maintain our longstanding position that DHS should not report on 
activities when the basis for reporting is political speech. We would also be loath to pass DHS requests 
for more information on the protests along to the appropriate fusion centers without strong guidance that 
the vast majority of activities occurring as part of these protests is protected. To do otherwise might give 
the appearance that DHS is attempting to circumvent existing restrictions, policies, and laws. 

To a large degree, these protests are no different from any other protests/events from civil liberties, civil 
rights and privacy perspectives. The issue is not the assembly of the groups nor the message of the 
participants, it is only (as far as DHS is concerned) illegal or suspicious behavior related to a DHS 
mission that occurs during the protests. A possible exception would be reports on the environment created 
at the protests sites that would endanger public health and safety, where the health and safety concern 
relates to a DHS mission. 



So there are certainly some circumstances that may allow limited reporting on behavior that is coincident 
and collocated with Occupy Wall Street-like protests. Persons demonstrating illegal or suspicious 
behavior and attempting to use the protests to obscure their activity could be reported, as long as there is 
no attempt to link the suspicious/illegal behavior to first amendment protected activity. Indeed, the normal 
CRCL and PRIV guidance used for HIRs and intelligence products would apply, as it is only the behavior 
which is being addressed. 

It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what 
type of information is being requested, if we were to reconsider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we 
would be happy to start the drafting process. Undoubtedly, drafting formal guidance would require a bit 
more time to gain the necessary clearances. 




J. Scott Mathews, CIPP, Senior Privacy Analyst for Intelligence 
Privacy Office, Department of Homeland Security 

Tel: FT El P7ZS1 Email: 
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From: Byers, Shala 

Sent: Monday, October 17, 2011 11:30 AM 

To: CRCL Produ ct Review; Privreview 

Cc: SL_Support;^^^|2E2^^M3E2^^H 
Subject: Guidance Requested: Occupy Wall Street 



All, 



We have received a number of questions and requests for information regarding Occupy Wall Street 
from a number of component partners and intelligence officers. Recognizing that this is a first 
amendment-protected activity, we have recommended (on an ad hoc basis when we received requests) 
that our Intelligence Officers refer inquiries to Fusion Centers and avoid the topic altogether. That being 
said, given the number of requests that have appeared, we would like to equip the field with formal 
guidance as they will likely continue to receive requests like this from Fusion Center partners. We would 
greatly appreciate formal guidance from CRCL and/or Privacy (whatever you all would prefer to do) 
sooner rather than later to make sure the all in the field are acting in accordance with CRCL and Privacy 
policies. Thank you for your help! 



Also, if you could, please cc SL Support on the response as they are the intake point for requests and it 
would be helpful for them to have this on hand to provide in case someone misses our e-mail. 

Best, 



Shala Byers 

Intelligence Coordination Branch 

State and ocal Program Office 

Intelligence and Analysis Directorate 

Depar tment of Homeland Security 

Office :( 

E-mail 
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Sent: 
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Cc: 

Subject: 

Attachments: 



SL_Support 

Tuesday, October 18, 2011 8:31 AM 

Privreview; CRCL Product Review 

Byers, Shala;Q2^@^^^^^^^^^| Coates, Toby; SL_Support 

RE: Guidance Requested: Occupy Wall Street 

SLSR-0022-12 (2).pdf; Intelligence Products 



Follow Up Flag: 
Flag Status: 



Follow up 
Completed 



Categories: 



Scott primary 



Privacy/CRCL, 

Attached is the only Occupy Wall Street related RFI that the l&A Support Branch has received. It came in 
yesterday from Toby Coates, DHS l&A Intelligence Officer in Louisiana. Our actions are documented on 
section 5 of the attached Support Request Form. We spoke to the Mr. Coates and closed out the 
request. He asked us to pass along the following questions that ATF submitted to the Fusion Centers so 
you will have a better idea of what they are looking for. 

The detailed concerns are listed below, as submitted by ATF: 

Has there been any violence perpetrated against Law Enforcement? 

Has Law Enforcement been mentioned as a potential target of protestors? 

Instances of violent rhetoric directed toward others? 

Have any conventional (firearms, knives) or unconventional (Molotov cocktails, bricks, stakes, 
chains) weapons been used and or confiscated from OWS protestors? 

If there have been weapons such as firearms or incendiary used or confiscated have the possessors 
been identified by Law Enforcement? 

Please let me know if you have any questions. 

Respectfully, 

Chris 



Christopher Martin 




Analytic Coordination Team Lead 

l&A Support Branch 

Office of Intelligence and Analysis 

External Operations Division 

U.S. Department of Homeland Security 



IC and DHS Component Team Lead 
T.K. Lawson 
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From: Coates, Toby 

Sent: Tuesday, October 18, 2011 7:55 AM 

To: SL_Support 

Cc: Byers, Shala; 

Subject: Re: Guidance Requested: Occupy Wall Street 



(b) (6) 



Absolutely. Thank you for the heads up. 

It may be more beneficial to also provide the actual questions that ATF submitted to all FCs after we 
closed this request to get a true idea of what they needed. 

My request was simply do we have any finished products, yes or no. 

The detailed concerns are listed below, as submitted by ATF. 

Has there been any violence perpetrated against Law Enforcement? 

Has Law Enforcement been mentioned as a potential target of protestors? 

Instances of violent rhetoric directed toward others? 

Have any conventional (firearms, knives) or unconventional (Molotov cocktails, bricks, stakes, 
chains) weapons been used and or confiscated from OWS protestors? 

If there have been weapons such as firearms or incendiary used or confiscated have the possessors 
been identified by Law Enforcement? 



Respectfully, 

Toby Coates 

Office of Intelligence & Analysis 

U.S. Department of Homeland Security 

Baton Rouge, LA 



Sent using Verizon BlackBerry 
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From: SL_Support 

Sent: Tuesday, October 18, 2011 07:27 AM 

To: Coates, Toby 

Cc: Byers, Shala; MtDMQM SL_Support; 

Subject: RE: Guidance Requested: Occupy Wall Street 

Toby, 

I just wanted to give you a heads up that per the below email, Privacy wants to get an idea of the types 
of RFIs that we're receiving related to Occupy Wall Street. Once they see the requests, they may be able 
to issue more formal guidance on how to proceed. Thus far, SL Support has only received your request, 
SLSR-0022-12. I will be passing this on to Privacy along with any future requests that we receive. 
Hopefully they'll be able to compile all the questions that are being asked and provide formal guidance 



to everyone in the field. Please let me know if you have any questions. A completed request form for 
SLSR-0022-12 is attached along with your original email. 

Respectfully, 

Chris 

Christopher Martin 




Analytic Coordination Team Lead 

l&A Support Branch 

Office of Intelligence and Analysis 

External Operations Division 

U.S. Department of Homeland Security 



IC and DHS Component Team Lead 
T.K. Lawson 
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From: Byers, Shala 

Sent: Monday, October 17, 2011 5:28 PM 

To: Privreview; CRCL Produc t Review 

Cc: SL_Support;JJ2H3M 

Subject: RE: Guidance Requested: Occupy Wall Street 



(b) (6) 



Scott, 

Many thanks for the thoughtful and detailed guidance. We appreciate you taking the time to present 
Privacy's perspective on the myriad possibilities and outcomes posed by RFIs relating to this topic. 

SL Support, 

Would you mind sending them a compilation of the requests you have received regarding this topic? If 
that isn't possible I can cull through what has come in from our various IOs when I get back on Monday. 
Per Scott, I believe that context would be helpful for both Privacy and CRCL colleagues alike as I imagine 
we will continue to receive inquiries. 

Best, 

Shala 



From: Privreview 

Sent: Monday, October 17, 2011 4:02 PM 

To: Byers, Shala; CRCL Product Review; Privreview 
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Cc: SL_Support;| 

Subject: RE: Guidance Requested: Occupy Wall Street 



PRIV and CRCL supports the position that the Occupy Wall Street-type protesters mostly are engaged in 
constitutionally protected activity. We maintain our longstanding position that DHS should not report on 
activities when the basis for reporting is political speech. We would also be loath to pass DHS requests 
for more information on the protests along to the appropriate fusion centers without strong guidance that 
the vast majority of activities occurring as part of these protests is protected. To do otherwise might give 
the appearance that DHS is attempting to circumvent existing restrictions, policies, and laws. 

To a large degree, these protests are no different from any other protests/events from civil liberties, civil 
rights and privacy perspectives. The issue is not the assembly of the groups nor the message of the 
participants, it is only (as far as DHS is concerned) illegal or suspicious behavior related to a DHS 
mission that occurs during the protests. A possible exception would be reports on the environment created 
at the protests sites that would endanger public health and safety, where the health and safety concern 
relates to a DHS mission. 

So there are certainly some circumstances that may allow limited reporting on behavior that is coincident 
and collocated with Occupy Wall Street-like protests. Persons demonstrating illegal or suspicious 
behavior and attempting to use the protests to obscure their activity could be reported, as long as there is 
no attempt to link the suspicious/illegal behavior to first amendment protected activity. Indeed, the normal 
CRCL and PRIV guidance used for HIRs and intelligence products would apply, as it is only the behavior 
which is being addressed. 

It would be helpful to see some of the RFIs received from the field to get a better idea of exactly what 
type of information is being requested, if we were to reconsider issuing more formal guidance. 

We hope this short and quick response will be helpful, but if the desire for formal guidance still exists, we 
would be happy to start the drafting process. Undoubtedly, drafting formal guidance would require a bit 
more time to gain the necessary clearances. 




J. Scott Mathews, CIPP, Senior Privacy Analyst for Intelligence 
Privacy Office, Department of Homeland Security 
Tel: Email: 

HSDN 

HTSN 
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Policy Advisor 
Office for Civil Rights & Civil Liberties 
Department of Homeland Security 
Office I 
Cell: ( 

Fax: (202) 357-8298 
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From: Byers, Shala 

Sent: Monday, October 17, 2011 11:30 AM 



To: CRCL Produ ct Review; P rivreview 

Cc: SL_Support;JJ2H3M 

Subject: Guidance Requested: Occupy Wall Street 



(b) (6) 



All, 

We have received a number of questions and requests for information regarding Occupy Wall Street 
from a number of component partners and intelligence officers. Recognizing that this is a first 
amendment-protected activity, we have recommended (on an ad hoc basis when we received requests) 
that our Intelligence Officers refer inquiries to Fusion Centers and avoid the topic altogether. That being 
said, given the number of requests that have appeared, we would like to equip the field with formal 
guidance as they will likely continue to receive requests like this from Fusion Center partners. We would 
greatly appreciate formal guidance from CRCL and/or Privacy (whatever you all would prefer to do) 
sooner rather than later to make sure the all in the field are acting in accordance with CRCL and Privacy 
policies. Thank you for your help! 

Also, if you could, please cc SL Support on the response as they are the intake point for requests and it 
would be helpful for them to have this on hand to provide in case someone misses our e-mail. 



Best, 



